Unscored CVE-2014-2925 EUVD-2014-2947GHSA-x5cm-jpm5-r4pf

Cross-site scripting (XSS) vulnerability in Advanced_Wireless_Content.asp in ASUS RT-AC68U and other RT series routers with firmware before…

Published Apr 21, 2014 · Updated Aug 6, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in Advanced_Wireless_Content.asp in ASUS RT-AC68U and other RT series routers with firmware before 3.0.0.4.374.5047 allows remote attackers to inject arbitrary web script or HTML via the current_page parameter to apply.cgi.

References

20140404 Reflected Cross-Site Scripting within the ASUS RT-AC68U Managing Web Interface mailing-list
http://support.asus.com/download.aspx?m=RT-N66U+%28VER.B1%29
http://www.asus.com/Networking/RTAC68U/HelpDesk_Download/
https://support.t-mobile.com/docs/DOC-21994
66669 vdb-entry