CVE-2007-4822

Cross-site request forgery CSRF vulnerability in the device management interface in Buffalo AirStation WHR-G54S 1.20 allows remote attackers to make configuration changes as an administrator via HTTP requests to certain HTML pages in the res parameter with an inp req parameter to cgi-bin/cgi, as...

CVE-2007-4822

CVE-2007-4822 affects Buffalo AirStation WHR-G54S (v1.20). A CSRF flaw in the device management interface allows remote attackers to modify configuration via HTTP requests to cgi-bin/cgi pages (e.g., ap.html, filter_ip.html) using res and inp parameters. Impact: integrity partially affected; conf...