Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Persistent Cross-Site Scripting (XSS) in the advancedsetup_websiteblocking.html Website Blocking page of the Actiontec C1000A router with firmware through CAC004-31.30L.95 allows a remote attacker to inject arbitrary HTML into the Website Blocking page by inserting arbitrary HTML into the 'TodUrlAdd' URL parameter in a /urlfilter.cmd POST request.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Actiontec C1000A路由器跨站脚本漏洞
Vulnerability Description
Actiontec C1000A是美国Actiontec Electronics公司的一款无线路由器产品。 采用CAC004-31.30L.95及之前版本固件的Actiontec C1000A路由器中的advancedsetup_websiteblocking.html页面存在跨站脚本漏洞。远程攻击者可通过向/urlfilter.cmd发送带有‘TodUrlAdd’URL参数的POST请求利用该漏洞向Website Blocking页面注入任意的HTML。
CVSS Information
N/A
Vulnerability Type
N/A