Unscored CVE-2014-1407 EUVD-2014-1484GHSA-82cc-q8p5-6m2c

Multiple cross-site scripting (XSS) vulnerabilities on the Conceptronic C54APM access point with runtime code 1.26 allow remote attackers t…

Published Jan 10, 2014 · Updated Aug 6, 2024 · Assigned by mitre

Description

Multiple cross-site scripting (XSS) vulnerabilities on the Conceptronic C54APM access point with runtime code 1.26 allow remote attackers to inject arbitrary web script or HTML via (1) the submit-url parameter in a Refresh action to goform/formWlSiteSurvey or (2) the wlan-url parameter to goform/formWlanSetup.

References

101919 vdb-entry
http://antoniovazquezblanco.github.io/docs/advisories/Advisory_C54APM_Multiple.pdf
101921 vdb-entry