CVE-2007-5027 Multiple cross-site scripting (XSS) vulnerabilities in cgi-bin/ddns in the web management panel for the WBR3404TX broadband router with firmware R1.94p0vTIG allow remote attackers to inject arbitrary....
MediumCVSS 4.3
EPSS 1.7%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Multiple cross-site scripting (XSS) vulnerabilities in cgi-bin/ddns in the web management panel for the WBR3404TX broadband router with firmware R1.94p0vTIG allow remote attackers to inject arbitrary web script or HTML via the (1) DD or (2) DU parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| level one wbr3404tx | All versions | No fix listed |
References
- 38886 vdb-entry
- 3159 third-party-advisory
- 20070919 WBR3404TX Broadband Router XSS mailing-list
- 25738 vdb-entry
- wbr3404tx-webmanagement-xss(36696) vdb-entry