[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Mitre has provided the following with the CVE number: CVE-2017-5900
there is a Stored XSS vulnerability in a NetComm router's model NB16WV-02
running version NB16WV_R0.09, If authorized user is able to inject the
Authenticated user is required:
Stored XSS will be injected and execute on the page reload.
This vulnearbilty can be used to steal session, cookies and many more.
NetComm will be releasing a patch in the coming weeks to address
Sent through the Full Disclosure mailing list
Web Archives & RSS: http://seclists.org/fulldisclosure/