Linksys WRT160N 'apply.cgi' Cross-Site Scripting Vulnerability

ID EDB-ID:32599
Type exploitdb
Reporter David Gil
Modified 2008-11-27T00:00:00


Linksys WRT160N 'apply.cgi' Cross-Site Scripting Vulnerability. CVE-2008-6280. Remote exploit for hardware platform


Linksys WRT160N is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input.

Attackers may exploit this issue by enticing victims into opening a malicious URI.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected device. This may help the attacker steal cookie-based authentication credentials, cause denial-of-service conditions, and launch other attacks.