Skip to content

leonardobg/CVE-2023-36146

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

2 Commits
 
 

Repository files navigation

CVE-2023-36146

PoC of CVE-2023-36146 - Multilaser RE 170 Firmware 2.2.6733

Authenticated stored Cross Site Scripting

Steps to Reproduce:

  1. Log in the equipment via your web browser
  2. Go to Security > IP Filtering
  3. In the "Description" field inject the payload "<image/src/onerror=prompt(8)>"
  4. Click Add
  5. Exploit!

About

No description, website, or topics provided.

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published