medium4.7Public exploit code
CVE-2018-6193
A Cross-Site Scripting (XSS) vulnerability was found in Routers2 2.24, affecting the 'rtr' GET parameter in a page=graph action to cgi-bin/routers2.pl.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Routers2 2.24 - Cross-Site Scripting2018-02-28 · webapps · perl · Verified
Impact
A Cross-Site Scripting (XSS) vulnerability was found in Routers2 2.24, affecting the 'rtr' GET parameter in a page=graph action to cgi-bin/routers2.pl.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Routers2 Project | Routers2 | Version 2.24 |