CVE-2018-25036 — Thomson TCW710 RgTime Persistent cross site scriting

Description (CNA)

A vulnerability has been found in Thomson TCW710 ST5D.10.05 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /goform/RgTime. The manipulation of the argument TimeServer1/TimeServer2/TimeServer3 with the input ><script>alert(1)</script> as part of POST Request leads to cross site scripting (Persistent). The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

Affected (CNA)

Vendor / product	Versions
Thomson / TCW710	affected ST5D.10.05

CWE

CWE-80

References

https://alquimistadesistemas.com/auditando-router-thomson-tcw710
https://vuldb.com/?id.126697

ADP enrichment

CVE

No English description supplied.

https://alquimistadesistemas.com/auditando-router-thomson-tcw710
https://vuldb.com/?id.126697

CISA-ADP

No English description supplied.

No references supplied.