CVE-2018-13310: XSS
First published: Mon Nov 26 2018(Updated: )
Cross-site scripting in password.htm in TOTOLINK A3002RU version 1.0.8 allows attackers to execute arbitrary JavaScript via the user's username.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Totolink A3002ru Firmware | =1.0.8 | |
| TOTOLINK A3002RU |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2018-13310?
CVE-2018-13310 is a vulnerability in TOTOLINK A3002RU version 1.0.8 that allows attackers to execute arbitrary JavaScript via the user's username.
How severe is CVE-2018-13310?
CVE-2018-13310 has a severity rating of medium, with a score of 6.1.
Which software version is affected by CVE-2018-13310?
TOTOLINK A3002RU version 1.0.8 is affected by CVE-2018-13310.
How can an attacker exploit CVE-2018-13310?
An attacker can exploit CVE-2018-13310 by injecting arbitrary JavaScript through the user's username in the password.htm page of TOTOLINK A3002RU version 1.0.8.
Is TOTOLINK A3002RU version 1.0.8 the only affected software version?
Yes, TOTOLINK A3002RU version 1.0.8 is the only affected software version by CVE-2018-13310.
- collector/nvd-index
- agent/weakness
- agent/severity
- agent/references
- agent/author
- agent/description
- agent/type
- agent/event
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/totolink
- canonical/totolink a3002ru firmware
- version/totolink a3002ru firmware/1.0.8
- canonical/totolink a3002ru