CoreCVE
Back

HIGH

An injection vulnerability exists in RT-AC88U Download Master before 3.1.0.108

Published Dec 9, 2020

Description

An injection vulnerability exists in RT-AC88U Download Master before 3.1.0.108. Accessing Main_Login.asp?flag=1&productname=FOOBAR&url=/downloadmaster/task.asp will redirect to the login site, which will show the value of the parameter productname within the title. An attacker might be able to influence the appearance of the login page, aka text injection.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-74

References (1)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner mitre
Published Dec 9, 2020
Updated Aug 4, 2024
Reserved Dec 9, 2020
Link CVE-2020-29655
CISA Vulnrichment
Updated n/a
NVD
Status Modified
Modified Jun 17, 2026
Link CVE-2020-29655
Red Hat
Severity n/a
Public date n/a
Links CVE-2020-29655