CVE-2009-2323

The web interface on the Axesstel MV 410R redirects users back to the referring page after execution of some CGI scripts, which makes it easier for remote attackers to avoid detection of cross-site request forgery CSRF attacks, as demonstrated by a redirect from the cgi-bin/wireless.cgi script...

CVE-2009-2323

The web interface on the Axesstel MV 410R redirects users back to the referring page after execution of some CGI scripts, which makes it easier for remote attackers to avoid detection of cross-site request forgery CSRF attacks, as demonstrated by a redirect from the cgi-bin/wireless.cgi script...

CVE-2009-2321

cgi-bin/sysconf.cgi on the Axesstel MV 410R allows remote attackers to cause a denial of service configuration reset via a RESTORE=RESTORE query string...

CVE-2009-2319

The default configuration of the Wi-Fi component on the Axesstel MV 410R does not use encryption, which makes it easier for remote attackers to obtain sensitive information by sniffing the network...

CVE-2009-2318

The Axesstel MV 410R allows remote attackers to cause a denial of service via a flood of SYN packets, a related issue to CVE-1999-0116...

CVE-2009-2317

The Axesstel MV 410R has a certain default administrator password, and does not force a password change, which makes it easier for remote attackers to obtain access...

CVE-2009-2322

The CVE-2009-2322 entry concerns the Axesstel MV 410R router. A vulnerability in the CGI script cgi-bin/sysconf.cgi enables cross-site scripting (XSS), allowing remote attackers to inject arbitrary web script or HTML via unspecified vectors. The NVD metrics indicate a Medium severity (CVSS v2: AV...

CVE-2009-2323

The CVE-2009-2323 entry concerns the Axesstel MV 410R web interface. The vulnerability arises because the device redirects the user back to the referring page after running certain CGI scripts, which can enable CSRF attack evasion (demonstrated via a redirect from cgi-bin/wireless.cgi). The NVD e...

CVE-2009-2321

CVE-2009-2321 affects the Axesstel MV 410R where the vulnerable component is cgi-bin/sysconf.cgi. A remote attacker can cause a denial of service (configuration reset) by supplying a RESTORE=RESTORE query string. The issue is documented with a CVSSv2 base score of 7.8 (HIGH) and a network attack ...

CVE-2009-2317

The CVE-2009-2317 entry pertains to the Axesstel MV 410R router that ships with a default administrator password and does not require changing it. This configuration allows remote attackers to obtain access. The available connected documents confirm the issue exists in the MV 410R as described, b...

CVE-2009-2322

Cross-site scripting XSS vulnerability in cgi-bin/sysconf.cgi on the Axesstel MV 410R allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2009-2319

The CVE-2009-2319 entry concerns the Axesstel MV 410R Wi‑Fi component. The vulnerability stems from the default configuration which does not use encryption, enabling remote attackers to sniff network traffic and potentially obtain sensitive information. No further technical details (affected firm...

CVE-2009-2318

CVE-2009-2318 affects the Axesstel MV 410R and describes a remote denial of service caused by a flood of SYN packets. Connected records relate this to CVE-1999-0116 (SYN flood) and consistently describe a DoS condition from crafted TCP connection attempts, without detailing a successful exploit o...

CVE-2009-2320

The CVE-2009-2320 issue affects the Axesstel MV 410R web interface where input validation relies on client-side JavaScript; remote attackers could send crafted data via a client that does not process JavaScript. The root cause is reliance on client-side validation, enabling potential unspecified ...

CVE-2009-2320

The web interface on the Axesstel MV 410R relies on client-side JavaScript code to validate input, which allows remote attackers to send crafted data, and possibly have unspecified other impact, via a client that does not process JavaScript...

Multiple Flaws in Axesstel MV 410R

Multiple Flaws in Axesstel MV 410R by Filip Palian filip dot palian at pjwstk dot edu dot pl Description: Axesstel MV 410R is a device offered by the two leading polish telecom operators Orange and Polish Telecom to provide broadband Internet in CDMA technology and it's already widely in use...

Axesstel MV 410R Bypass / XSS

Multiple Flaws in Axesstel MV 410R by Filip Palian filip dot palian at pjwstk dot edu dot pl Description: Axesstel MV 410R is a device offered by the two leading polish telecom operators Orange and Polish Telecom to provide broadband Internet in CDMA technology and it's already widely in use...

Multiple Axesstel MV 410R wireless router security vulnerabilities

Crossite scripting, devica access from WAN, default account...

Unfixed XSS vulnerability at use.cuhomesavings.com

Security researcher DerickTham, has submitted on 21/12/2007 a cross-site-scripting XSS vulnerability affecting use.cuhomesavings.com, which at the time of submission ranked 4781639 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 23/12/2007. It ...

Unfixed XSS vulnerability at gallery.mv-purbach.at

Security researcher Narcoticxs, has submitted on 24/09/2007 a cross-site-scripting XSS vulnerability affecting gallery.mv-purbach.at, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 28/09/2007. It is...