EUVD-2007-3826

Malware in sbrugna...

Cross site scripting

Cross-site scripting XSS vulnerability in the 8e6 R3000 Enterprise Filter before 2.0.05 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: this may be the same as CVE-2007-2970...

CVE-2007-3842

Cross-site scripting XSS vulnerability in the 8e6 R3000 Enterprise Filter before 2.0.05 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: this may be the same as CVE-2007-2970...

CVE-2007-2970

CVE-2007-2970 corresponds to XSS in the 8e6 R3000 Internet Filter / Enterprise Filter (cgi/block.cgi) that allows remote attacker-injected scripts via the (1) URL, (2) CAT, and (3) USER parameters. Related records (CVE-2007-3842) describe the same family of vulnerability and state the affected pr...