PT-2022-8049

Name of the Vulnerable Software and Affected Versions Thomson TCW710 version ST5D.10.05 Description A vulnerability was found in the file /goform/RgDdns, where the manipulation of the DdnsHostName argument with malicious input, such as alert1, as part of a POST request leads to cross-site scripti...

THOMSON TCW710 Cross-site Scripting Vulnerability

The THOMSON TCW710 is a set-top box from THOMSON Canada. A security vulnerability exists in the THOMSON TCW710 ST5D.10.05 version that originates from some unknown functionality in the file /goform/RgDdns. A remote attacker can exploit the vulnerability to cause a stored cross-site scripting atta...

CVE-2014-3778: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in goform/RgDdns in ARRIS formerly Motorola SBG901 SURFboard Wireless Cable Modem allow remote attackers to hijack the authentication of administrators for requests that 1 change the dns service via the DdnsService parameter, 2 change the...