CVE-2006-3974

CVE-2006-3974 affects 3Com OfficeConnect Secure Router firmware 1.04-168, where a cross-site scripting (XSS) flaw in the admin CGI (cgi-bin/admin) allows remote attackers to inject arbitrary web script or HTML via the tk parameter. The NVD entry records a CVSS v2 base score of 4.3 (Medium) with n...

3Com OfficeConnect Secure Router 1.04-168 - Tk Cross-Site Scripting

3Com OfficeConnect Secure Router 1.04-168 - Tk Cross-Site Scripting source: https://www.securityfocus.com/bid/24374/info OfficeConnect Secure Router is prone to a cross-site scripting vulnerability. Exploiting this vulnerability may allow an attacker to perform cross-site scripting attacks on...