CVE-2018-25034

MediumCVSS 5.4/10Last modified Jun 17, 2026

Description

A vulnerability, which was classified as problematic, has been found in Thomson TCW710 ST5D.10.05. This issue affects some unknown processing of the file /goform/wlanPrimaryNetwork. The manipulation of the argument ServiceSetIdentifier with the input ><script>alert(1)</script> as part of POST Request leads to basic cross site scripting (Persistent). The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-126695.

Metrics

CVSS 3.1 5.4/10CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-80 CWE-79

Affected software

No affected versions have been published.

Timeline

Published: Jun 12, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2018

CVE-2018-250355.4A vulnerability, which was classified as problematic, was found in Thomson TCW710 ST5D.10.05. Affected is an unknown function of the file /g CVE-2018-250365.4A vulnerability has been found in Thomson TCW710 ST5D.10.05 and classified as problematic. Affected by this vulnerability is an unknown func CVE-2018-250375.4A vulnerability was found in Thomson TCW710 ST5D.10.05 and classified as problematic. Affected by this issue is some unknown functionality o CVE-2018-250385.4A vulnerability was found in Thomson TCW710 ST5D.10.05. It has been classified as problematic. This affects an unknown part of the file /gof CVE-2018-250395.4A vulnerability was found in Thomson TCW710 ST5D.10.05. It has been declared as problematic. This vulnerability affects unknown code of the CVE-2018-25046.1SAP NetWeaver AS Java Web Container service does not validate against whitelist the HTTP host header which can result in HTTP Host Header Ma CVE-2018-250408.8A vulnerability was found in uTorrent Web. It has been declared as critical. Affected by this vulnerability is an unknown functionality of t CVE-2018-250418.8A vulnerability was found in uTorrent. It has been rated as critical. Affected by this issue is some unknown functionality of the component CVE-2018-250428.8A vulnerability classified as critical has been found in uTorrent. This affects an unknown part. The manipulation leads to memory corruption CVE-2018-250438.8A vulnerability classified as critical was found in uTorrent. This vulnerability affects unknown code of the component PRNG. The manipulatio CVE-2018-250448.8A vulnerability, which was classified as critical, has been found in uTorrent. This issue affects some unknown processing of the component G CVE-2018-250456.1Django REST framework (aka django-rest-framework) before 3.9.1 allows XSS because the default DRF Browsable API view templates disable autoe