ID
VAR-E-201403-0225
EDB ID
32237
TITLE
Ubee EVW3200 - Multiple Persistent Cross-Site Scripting Vulnerabilities - Hardware webapps Exploit
Trust: 0.6
DESCRIPTION
Ubee EVW3200 - Multiple Persistent Cross-Site Scripting Vulnerabilities. CVE-104458CVE-104457 . webapps exploit for Hardware platform
Trust: 0.6
AFFECTED PRODUCTS
| vendor: | ubee | model: | evw3200 | scope: | - | version: | - | Trust: 1.6 |
EXPLOIT
# Exploit Title: Ubee EVW3200 - Multiple Persistent Cross Site Scripting
# Google Dork: N/A
# Date: 02-03-2014
# Exploit Author: Jeroen - IT Nerdbox
# Vendor Homepage: http://www.ubeeinteractive.com/
# Software Link:
http://www.ubeeinteractive.com/products/cable?field_product_catetory_tid=20
# Version: All
# Tested on: N/A
# CVE : N/A
#
## Description:
#
# The SSID and Device name settings in the wireless configuration do not
sanitize their input.
#
# The VPN Tunnel name is also vulnerable for persistent XSS
#
## PoC:
#
# Entering the following payload in one of these fields will execute
javascript:
#
# "><input onmouseover=prompt(1)> or "><button
onclick=prompt(1)>XSS</button>
#
#
# More information can be found at:
http://www.nerdbox.it/ubee-evw3200-multiple-vulnerabilities/
Trust: 1.0
EXPLOIT LANGUAGE
txt
Trust: 0.6
PRICE
free
Trust: 0.6
TYPE
Multiple Persistent Cross-Site Scripting Vulnerabilities
Trust: 1.0
CREDITS
Jeroen - IT Nerdbox
Trust: 0.6
EXTERNAL IDS
| db: | EXPLOIT-DB | id: | 32237 | Trust: 1.6 |
| db: | EDBNET | id: | 53783 | Trust: 0.6 |
REFERENCES
| url: | https://www.exploit-db.com/exploits/32237/ | Trust: 0.6 |
SOURCES
| db: | EXPLOIT-DB | id: | 32237 |
| db: | EDBNET | id: | 53783 |
LAST UPDATE DATE
2022-07-27T10:00:59.718000+00:00
SOURCES RELEASE DATE
| db: | EXPLOIT-DB | id: | 32237 | date: | 2014-03-13T00:00:00 |
| db: | EDBNET | id: | 53783 | date: | 2014-03-13T00:00:00 |