CVEvulnerability
CVE-2007-5027
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2007-09-21
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Multiple cross-site scripting (XSS) vulnerabilities in cgi-bin/ddns in the web management panel for the WBR3404TX broadband router with firmware R1.94p0vTIG allow remote attackers to inject arbitrary web script or HTML via the (1) DD or (2) DU parameter.
Affected configurations
• level one wbr3404tx
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://osvdb.org/38886 osvdb.org
- http://securityreason.com/securityalert/3159 securityreason.com
- http://www.securityfocus.com/archive/1/479994/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/25738 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/36696 exchange.xforce.ibmcloud.com
- http://osvdb.org/38886 osvdb.org
- http://securityreason.com/securityalert/3159 securityreason.com
- http://www.securityfocus.com/archive/1/479994/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/25738 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/36696 exchange.xforce.ibmcloud.com