CyberRota Analysis
AI-GeneratedA cross-site scripting vulnerability exists in the Web UI of Netcore NR268 version 1.7.121109, specifically within the eval function of the l7_call_board_user_set.cgi file, allowing remote attackers to manipulate input arguments such as title, note, URL, or content. Although the severity is rated low, the availability of public exploits means that organizations using this product should prioritize remediation to mitigate potential security risks. Users of the affected version should apply patches or implement mitigations as soon as possible, given the vendor's lack of response to the disclosure.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A vulnerability was identified in Netcore NR268 1.7.121109. Affected by this vulnerability is the function eval of the file /router/l7_call_board_user_set.cgi of the component Web UI. Such manipulation of the argument title/note/URL/content leads to cross site scripting. The attack can be launched remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.