CVE-2018-17021 | BDVDB-2026-106947 Detail

Description#

Cross-site scripting (XSS) vulnerability on ASUS GT-AC5300 devices with firmware through 3.0.0.4.384_32738 allows remote attackers to inject arbitrary web script or HTML via the appGet.cgi hook parameter.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://github.com/PAGalaxyLab/VulInfo/blob/master/ASUS/ac5300_xss/ASUS%20GT-AC5300%20XSS.MD

Exploit#

No public exploit known

History#

Version 12018-09-13Record published in the CVE List.
Version 22024-09-16Most recent update recorded in the CVE List.