Gryphon Tower 漏洞列表

Gryphon Tower router web interface contains a reflected cross-site scripting vulnerability in the url parameter of the /cgi-bin/luci/site_access/ page. An attacker can exploit this issue by tricking a user into following a specially crafted link, granting the attacker JavaScript execution in the victim's browser.

Gryphon Tower router web interface contains a reflected cross-site scripting vulnerability in the url parameter of the /cgi-bin/luci/site_access/ page. An attacker can exploit this issue by tricking a user into following a specially crafted link, granting the attacker JavaScript execution in the victim's browser.

Gryphon Tower路由器的web界面 /site_access页面的url参数存在反射式跨站脚本漏洞。攻击者可以通过诱骗用户跟随一个特制的链接来利用这个问题，从而允许攻击者在受害者的浏览器上下文中执行javascript。