CVEvulnerability
CVE-2008-1250
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2008-03-10
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-352
Description
Multiple cross-site request forgery (CSRF) vulnerabilities in the web interface on the central phone server for the Snom 320 SIP Phone allow remote attackers to perform actions as the phone user, as demonstrated by inserting an address-book entry containing an XSS sequence.
Affected configurations
• snom 320 sip phone
Related
Weakness · CWE (1)
- CWE-352 Cross-Site Request Forgery weakness
References
- http://secunia.com/advisories/28938 secunia.com
- http://www.gnucitizen.org/projects/router-hacking-challenge/ www.gnucitizen.org
- http://www.securityfocus.com/archive/1/489009/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/27767 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/40500 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/28938 secunia.com
- http://www.gnucitizen.org/projects/router-hacking-challenge/ www.gnucitizen.org
- http://www.securityfocus.com/archive/1/489009/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/27767 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/40500 exchange.xforce.ibmcloud.com