CVE-2007-3574 in WAG54GS
Summary
Multiple cross-site scripting (XSS) vulnerabilities in setup.cgi on the Cisco Linksys WAG54GS Wireless-G ADSL Gateway with 1.00.06 firmware allow remote attackers to inject arbitrary web script or HTML via the (1) c4_trap_ip_, (2) devname, (3) snmp_getcomm, or (4) snmp_setcomm parameter.
VulDB is the best source for vulnerability data and more expert information about this specific topic.
Reservation
07/05/2007
Disclosure
07/05/2007
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 37650 | Linksys WAG54GS setup.cgi cross site scripting | 79 | Proof-of-Concept | Not defined | CVE-2007-3574 |