Lucene search
K

CVE-2014-2923

🗓️ 21 Apr 2014 00:00:00Reported by candidateType 
cve
 cve
👁 4 Views🌐 WEB

Convergence of connected data shows a concrete CVE-2014-2923 vulnerability in the Comtrend CT-5361T router: a Cross-Site Request Forgery (CSRF) affecting passwd changes and an associated Cross‑Site Scripting (XSS) issue. The Packet Storm entry doc...

Related
Paths
ReporterTitlePublishedViews
Family
Circl
CVE-2014-2923
21 Apr 201400:00
circl
Packet Storm
Comtrend CT 5361T Cross Site Request Forgery / Cross Site Scripting
21 Apr 201400:00
packetstorm
ParameterPositionPathDescriptionCWE
sysPasswordrequest body/password.cgiCross Site Request Forgery vulnerability that allows an attacker to change the password.CWE-352
actionquery param/ddnsmngr.cmdCross-Site Scripting vulnerability that allows execution of script code through user input.CWE-79
servicequery param/ddnsmngr.cmdCross-Site Scripting vulnerability that allows execution of script code through user input.CWE-79
hostnamequery param/ddnsmngr.cmdCross-Site Scripting vulnerability that allows execution of script code through user input.CWE-79
usernamequery param/ddnsmngr.cmdCross-Site Scripting vulnerability that allows execution of script code through user input.CWE-79
passwordquery param/ddnsmngr.cmdCross-Site Scripting vulnerability that allows execution of script code through user input.CWE-79
ifacequery param/ddnsmngr.cmdCross-Site Scripting vulnerability that allows execution of script code through user input.CWE-79

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

21 Apr 2014 00:00Current
4