CVE-2007-5673

CVE-2007-5673 is a confirmed cross-site scripting (XSS) vulnerability in the device’s web interface: specifically the cgi-bin/webif.exe component of the ifnet WebIf. The issue allows remote attackers to inject arbitrary web script or HTML via the cmd parameter, resulting in likely client-side scr...

CVE-2007-5673: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in cgi-bin/webif.exe in ifnet WebIf allows remote attackers to inject arbitrary web script or HTML via the cmd parameter...

Directory traversal

Directory traversal vulnerability in webif.cgi in ifnet WEBIF allows remote attackers to include and execute arbitrary local files a .. dot dot in the outconfig parameter...

CVE-2007-3266

CVE-2007-3266 affects the ifnet WEBIF web interface. The vulnerability is a directory traversal in the webif.cgi module via the outconfig parameter (dot-dot/../../). This allows remote attackers to include and execute arbitrary local files on the server. Evidence from NVD confirms the description...

CVE-2007-3266: Undefined Security Weakness

Directory traversal vulnerability in webif.cgi in ifnet WEBIF allows remote attackers to include and execute arbitrary local files a .. dot dot in the outconfig parameter...