Skip to content
OpenAdvisories
Low · 3.5 CVE-2018-25036 EUVD-2018-13808GHSA-4rc6-v4jg-27v9

Thomson TCW710 RgTime Persistent cross site scriting

Published Jun 12, 2022 · Updated Apr 15, 2025 · Assigned by VulDB

Description

A vulnerability has been found in Thomson TCW710 ST5D.10.05 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /goform/RgTime. The manipulation of the argument TimeServer1/TimeServer2/TimeServer3 with the input ><script>alert(1)</script> as part of POST Request leads to cross site scripting (Persistent). The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

Affected products

VendorProductAffectedFixed
Thomson TCW710 ST5D.10.05 —

References