CVE-2007-5673

CVE-2007-5673 is a confirmed cross-site scripting (XSS) vulnerability in the device’s web interface: specifically the cgi-bin/webif.exe component of the ifnet WebIf. The issue allows remote attackers to inject arbitrary web script or HTML via the cmd parameter, resulting in likely client-side scr...

Directory traversal

Directory traversal vulnerability in webif.cgi in ifnet WEBIF allows remote attackers to include and execute arbitrary local files a .. dot dot in the outconfig parameter...

CVE-2007-3266

CVE-2007-3266 affects the ifnet WEBIF web interface. The vulnerability is a directory traversal in the webif.cgi module via the outconfig parameter (dot-dot/../../). This allows remote attackers to include and execute arbitrary local files on the server. Evidence from NVD confirms the description...