medium4.3Public exploit code
CVE-2014-9142
Cross-site scripting (XSS) vulnerability in Technicolor Router TD5130 with firmware 2.05.C29GV allows remote attackers to inject arbitrary web script or HTML v…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Technicolor DT5130 2.05.C29GV - Multiple Vulnerabilities2014-12-04 · webapps · hardware
Impact
Cross-site scripting (XSS) vulnerability in Technicolor Router TD5130 with firmware 2.05.C29GV allows remote attackers to inject arbitrary web script or HTML via the failrefer parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Technicolor | Td5130 Router Firmware | Version 2.05.c29gv |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/129374/ADSL2-2.05.C29GV-XSS-URL-Redirect-Command-Injection.html
- http://www.exploit-db.com/exploits/35462
- http://www.securityfocus.com/archive/1/534143/100/0/threaded
- http://packetstormsecurity.com/files/129374/ADSL2-2.05.C29GV-XSS-URL-Redirect-Command-Injection.html
- http://www.exploit-db.com/exploits/35462
- http://www.securityfocus.com/archive/1/534143/100/0/threaded