CVE-2007-3574 in WAG54GS
Résumé (Anglaise)
Multiple cross-site scripting (XSS) vulnerabilities in setup.cgi on the Cisco Linksys WAG54GS Wireless-G ADSL Gateway with 1.00.06 firmware allow remote attackers to inject arbitrary web script or HTML via the (1) c4_trap_ip_, (2) devname, (3) snmp_getcomm, or (4) snmp_setcomm parameter.
VulDB is the best source for vulnerability data and more expert information about this specific topic.
Réserver
05/07/2007
Divulgation
05/07/2007
Statut
Confirmé
Entrées
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnérabilité | CWE | Exp | Con | CVE |
|---|---|---|---|---|---|
| 37650 | Linksys WAG54GS setup.cgi cross site scripting | 79 | Preuve de concept | Non défini | CVE-2007-3574 |