CVEvulnerability
CVE-2006-0946
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2006-03-01
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
Description
Cross-site scripting (XSS) vulnerability in Thomson SpeedTouch modems running firmware 5.3.2.6.0 allows remote attackers to inject arbitrary web script or HTML via the name parameter to the LocalNetwork page.
Affected configurations
• thomson speedtouch 516 5.3.2.6.0
• thomson speedtouch 530 5.3.2.6.0
• thomson speedtouch 536 5.3.2.6.0
• thomson speedtouch 546 5.3.2.6.0
• thomson speedtouch 576 5.3.2.6.0
• thomson speedtouch 580 5.3.2.6.0
• thomson speedtouch 585 5.3.2.6.0
References
- http://secunia.com/advisories/19069 secunia.com
- http://securitytracker.com/id?1015688 securitytracker.com
- http://www.osvdb.org/23527 www.osvdb.org
- http://www.securityfocus.com/archive/1/426186 Exploit
- http://www.securityfocus.com/bid/16839 Exploit
- http://www.vupen.com/english/advisories/2006/0765 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24977 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/19069 secunia.com
- http://securitytracker.com/id?1015688 securitytracker.com
- http://www.osvdb.org/23527 www.osvdb.org
- http://www.securityfocus.com/archive/1/426186 Exploit
- http://www.securityfocus.com/bid/16839 Exploit
- http://www.vupen.com/english/advisories/2006/0765 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24977 exchange.xforce.ibmcloud.com