medium4.3
CVE-2008-1257
Cross-site scripting (XSS) vulnerability in Forms/DiagGeneral_2 on the ZyXEL P-660HW series router allows remote attackers to inject arbitrary web script or HT…
Impact
Cross-site scripting (XSS) vulnerability in Forms/DiagGeneral_2 on the ZyXEL P-660HW series router allows remote attackers to inject arbitrary web script or HTML via the PingIPAddr parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Zyxel | P-660hw | Version _t1 |
| Zyxel | P-660hw D1 | All versions Version v2 |
| Zyxel | P-660hw D3 | All versions |
| Zyxel | P-660hw T3 | All versions Version v2 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.gnucitizen.org/projects/router-hacking-challenge/
- http://www.securityfocus.com/archive/1/489009/100/0/threaded
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41109
- http://www.gnucitizen.org/projects/router-hacking-challenge/
- http://www.securityfocus.com/archive/1/489009/100/0/threaded
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41109