cbcvebase.
CVE-2013-5218
published 2013-12-30

CVE-2013-5218: Cross-site scripting (XSS) vulnerability on the HOT HOTBOX router with software 2.1.11 allows remote attackers to inject arbitrary web script or HTML via a…

PriorityP420low2.9CVSS 2.0
AVAACMAuNCNIPAN
EXPLOIT
EPSS
3.76%
88.5th percentile
Cross-site scripting (XSS) vulnerability on the HOT HOTBOX router with software 2.1.11 allows remote attackers to inject arbitrary web script or HTML via a crafted DHCP Host Name option, which is not properly handled during rendering of the DHCP table in wlanAccess.asp.

Affected

1 ranges
VendorProductVersion rangeFixed in
hothotbox_router_firmware——
CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.