CVE-2020-27366

Cross Site Scripting (XSS) vulnerability in wlscanresults.html in Humax HGB10R-02 BRGCAB version 1.0.03, allows local attackers to execute arbitrary code.
References
Link Resource
https://pastebin.com/sr0JR1ys Third Party Advisory
https://pastebin.com/sr0JR1ys Third Party Advisory
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:humaxdigital:hgb10r-02_firmware:1.0.03:*:*:*:*:*:*:*
cpe:2.3:h:humaxdigital:hgb10r-02:-:*:*:*:*:*:*:*

History

21 Nov 2024, 05:21

Type Values Removed Values Added
References () https://pastebin.com/sr0JR1ys - Third Party Advisory () https://pastebin.com/sr0JR1ys - Third Party Advisory

29 Aug 2023, 23:41

Type Values Removed Values Added
First Time Humaxdigital hgb10r-02
Humaxdigital
Humaxdigital hgb10r-02 Firmware
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 6.1
CWE CWE-79
CPE cpe:2.3:o:humaxdigital:hgb10r-02_firmware:1.0.03:*:*:*:*:*:*:*
cpe:2.3:h:humaxdigital:hgb10r-02:-:*:*:*:*:*:*:*
References (MISC) https://pastebin.com/sr0JR1ys - (MISC) https://pastebin.com/sr0JR1ys - Third Party Advisory

28 Aug 2023, 19:28

Type Values Removed Values Added
New CVE

Information

Published : 2023-08-28 18:15

Updated : 2024-11-21 05:21


NVD link : CVE-2020-27366

Mitre link : CVE-2020-27366

CVE.ORG link : CVE-2020-27366


JSON object : View

Products Affected

humaxdigital

  • hgb10r-02
  • hgb10r-02_firmware
CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')