Cross site scripting

Cross-site scripting XSS vulnerability in apply.cgi on the Linksys WRT160N allows remote attackers to inject arbitrary web script or HTML via the action parameter in a DHCPStatic operation...

CVE-2008-6280

Cross-site scripting XSS vulnerability in apply.cgi on the Linksys WRT160N allows remote attackers to inject arbitrary web script or HTML via the action parameter in a DHCPStatic operation...

CVE-2008-6280

The vulnerability affects the Linksys WRT160N router, exposed through the apply.cgi utility. The root cause is an XSS flaw in the DHCP_Static path caused by unsanitized input via the action parameter, allowing remote attackers to inject arbitrary web script or HTML. According to the sources, the ...