Lucene search
K

10 matches found

CNVD
CNVD
added 2015/06/26 12:0 a.m.3 views

Alcatel-Lucent CellPipe 7130 RG 5Ae.M2013 HOL Cross-Site Request Forgery Vulnerability

The Alcatel-Lucent CellPipe 7130 RG 5Ae.M2013 HOL is a router product from Alcatel-Lucent, France. A cross-site request forgery vulnerability in the Alcatel-Lucent CellPipe 7130 RG 5Ae.M2013 HOL using firmware version 1.0.0.20h.HOL allows remote attackers to construct malicious URIs, trick users...

6.8CVSS6.9AI score0.00118EPSS
Exploits2References1
NVD
NVD
added 2015/06/23 2:59 p.m.8 views

CVE-2015-4586

Cross-site request forgery CSRF vulnerability in Alcatel-Lucent CellPipe 7130 RG 5Ae.M2013 HOL with firmware 1.0.0.20h.HOL allows remote attackers to hijack the authentication of administrators for requests that create a user account via an adduser action in a request to password.cmd...

6.8CVSS7.2AI score0.00118EPSS
Exploits2References2
Prion
Prion
added 2015/06/23 2:59 p.m.11 views

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in Alcatel-Lucent CellPipe 7130 RG 5Ae.M2013 HOL with firmware 1.0.0.20h.HOL allows remote attackers to hijack the authentication of administrators for requests that create a user account via an adduser action in a request to password.cmd...

6.8CVSS7.7AI score0.00118EPSS
Exploits2References2Affected Software1
CVE
CVE
added 2015/06/23 2:0 p.m.41 views

CVE-2015-4586

The CVE-2015-4586 entry concerns the Alcatel-Lucent CellPipe 7130 RG 5Ae.M2013 HOL router with firmware 1.0.0.20h.HOL. A Cross-Site Request Forgery (CSRF) vulnerability in the device’s web interface can allow an attacker to hijack administrator authentication and perform actions such as creating ...

6.8CVSS7.4AI score0.00118EPSS
Exploits2References2Affected Software1
Cvelist
Cvelist
added 2015/06/23 2:0 p.m.15 views

CVE-2015-4586

Cross-site request forgery CSRF vulnerability in Alcatel-Lucent CellPipe 7130 RG 5Ae.M2013 HOL with firmware 1.0.0.20h.HOL allows remote attackers to hijack the authentication of administrators for requests that create a user account via an adduser action in a request to password.cmd...

7.2AI score0.00118EPSS
Exploits2References2
CNVD
CNVD
added 2015/06/23 12:0 a.m.3 views

Alcatel-Lucent CellPipe 7130 Router Cross-Site Scripting Vulnerability

The Alcatel-Lucent CellPipe 7130 Router is a router product from Alcatel-Lucent, France. A cross-site scripting vulnerability exists in the Alcatel-Lucent CellPipe 7130 Router. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML via the 'Custom application' fie...

4.3CVSS6AI score0.00225EPSS
Exploits2References1
NVD
NVD
added 2015/06/18 6:59 p.m.10 views

CVE-2015-4587

Cross-site scripting XSS vulnerability in the Alcatel-Lucent CellPipe 7130 router with firmware 1.0.0.20h.HOL allows remote attackers to inject arbitrary web script or HTML via the "Custom application" field in the "port triggering" menu...

4.3CVSS5.8AI score0.00225EPSS
Exploits2References2
CVE
CVE
added 2015/06/18 6:0 p.m.34 views

CVE-2015-4587

CVE-2015-4587 – A stored XSS in the Alcatel-Lucent CellPipe 7130 Router Web UI is triggered via the On-the-fly input in the "Custom application" field within the "port triggering" menu. Affected firmware: 1.0.0.20h.HOL. The root cause is unsanitized user input interpreted as HTML/JavaScript in th...

4.3CVSS5.9AI score0.00225EPSS
Exploits2References2Affected Software1
Packet Storm
Packet Storm
added 2015/06/16 12:0 a.m.45 views

CellPipe 7130 Cross Site Request Forgery

CellPipe Router CSRF vulnerability Device model : CellPipe 7130 RG 5Ae. M2013 HOL Software Version: : 1.0.0.20h.HOL CWE: 352 - https://cwe.mitre.org/data/definitions/352.html CVE: CVE-2015-4586 Date: 16/06/2015 Discovered by: Dionisia Lerataki https://gr.linkedin.com/pub/dionisia-lerataki/88/18/8...

6.8CVSS0.7AI score0.00118EPSS
Exploits2
Packet Storm
Packet Storm
added 2015/06/16 12:0 a.m.28 views

CellPipe 7130 Cross Site Scripting

CellPipe Router XSS vulnerability Device model : CellPipe 7130 RG 5Ae. M2013 HOL Software Version: : 1.0.0.20h.HOL CVE: CVE-2015-4587 Date: 16/06/2015 Discovered by: Dionisia Lerataki https://gr.linkedin.com/pub/dionisia-lerataki/88/18/891 Vulnerability type: Stored XSS vulnerabilities in the...

4.3CVSS0.00225EPSS
Exploits2
Rows per page
Query Builder