EUVD-2015-4607

Malware in sbrugna...

Alcatel-Lucent CellPipe 7130 RG 5Ae.M2013 HOL Cross-Site Request Forgery Vulnerability

The Alcatel-Lucent CellPipe 7130 RG 5Ae.M2013 HOL is a router product from Alcatel-Lucent, France. A cross-site request forgery vulnerability in the Alcatel-Lucent CellPipe 7130 RG 5Ae.M2013 HOL using firmware version 1.0.0.20h.HOL allows remote attackers to construct malicious URIs, trick users...

CVE-2015-4586

Cross-site request forgery CSRF vulnerability in Alcatel-Lucent CellPipe 7130 RG 5Ae.M2013 HOL with firmware 1.0.0.20h.HOL allows remote attackers to hijack the authentication of administrators for requests that create a user account via an adduser action in a request to password.cmd...

PT-2015-6629

Name of the Vulnerable Software and Affected Versions Alcatel-Lucent CellPipe 7130 RG 5Ae.M2013 HOL version 1.0.0.20h.HOL Description A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of administrators for requests that create a user account via an add...

CVE-2015-4586: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in Alcatel-Lucent CellPipe 7130 RG 5Ae.M2013 HOL with firmware 1.0.0.20h.HOL allows remote attackers to hijack the authentication of administrators for requests that create a user account via an adduser action in a request to password.cmd...

PT-2015-6630

Name of the Vulnerable Software and Affected Versions Alcatel-Lucent CellPipe 7130 router version 1.0.0.20h.HOL Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via the Custom application field in the "port triggering" menu...

CVE-2015-4587: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Alcatel-Lucent CellPipe 7130 router with firmware 1.0.0.20h.HOL allows remote attackers to inject arbitrary web script or HTML via the "Custom application" field in the "port triggering" menu...