24 matches found
EUVD-2007-6692
Malware in sbrugna...
EUVD-2011-4430
Malware in sbrugna...
EUVD-2007-6691
Malware in sbrugna...
CVE-2011-4504
The UPnP IGD implementation in the Pseudo ICS UPnP software on the ZyXEL P-330W allows remote attackers to establish arbitrary port mappings by sending a UPnP AddPortMapping action in a SOAP request to the WAN interface, related to an "external forwarding" vulnerability...
ZyXEL P-330W Multiple Vulnerabilities
No description provided by source...
CVE-2011-4504
The UPnP IGD implementation in the Pseudo ICS UPnP software on the ZyXEL P-330W allows remote attackers to establish arbitrary port mappings by sending a UPnP AddPortMapping action in a SOAP request to the WAN interface, related to an "external forwarding" vulnerability...
Xxe
The UPnP IGD implementation in the Pseudo ICS UPnP software on the ZyXEL P-330W allows remote attackers to establish arbitrary port mappings by sending a UPnP AddPortMapping action in a SOAP request to the WAN interface, related to an "external forwarding" vulnerability...
CVE-2011-4504
The CVE-2011-4504 entry concerns the UPnP IGD implementation in the Pseudo ICS UPnP software used by ZyXEL P-330W. The vulnerability arises in the UPnP AddPortMapping action processed on the WAN interface, related to an “external forwarding” issue, enabling remote attackers to establish arbitrary...
PT-2011-4968
Name of the Vulnerable Software and Affected Versions ZyXEL P-330W affected versions not specified Description The issue concerns the UPnP IGD implementation in the Pseudo ICS UPnP software, allowing remote attackers to establish arbitrary port mappings. This is achieved by sending a UPnP...
CVE-2011-4504: Undefined Security Weakness
The UPnP IGD implementation in the Pseudo ICS UPnP software on the ZyXEL P-330W allows remote attackers to establish arbitrary port mappings by sending a UPnP AddPortMapping action in a SOAP request to the WAN interface, related to an "external forwarding" vulnerability...
Cross site request forgery (csrf)
Multiple cross-site request forgery CSRF vulnerabilities in the web management interface in the ZyXEL P-330W router allow remote attackers to hijack the authentication of administrators for requests that 1 enable remote router management via goform/formRmtMgt or 2 modify the administrator passwor...
CVE-2007-6730
Multiple cross-site request forgery CSRF vulnerabilities in the web management interface in the ZyXEL P-330W router allow remote attackers to hijack the authentication of administrators for requests that 1 enable remote router management via goform/formRmtMgt or 2 modify the administrator passwor...
CVE-2007-6729
Cross-site scripting XSS vulnerability in the web management interface in the ZyXEL P-330W router allows remote attackers to inject arbitrary web script or HTML via the pingstr parameter and other unspecified vectors...
CVE-2007-6730
Multiple cross-site request forgery CSRF vulnerabilities in the web management interface in the ZyXEL P-330W router allow remote attackers to hijack the authentication of administrators for requests that 1 enable remote router management via goform/formRmtMgt or 2 modify the administrator passwor...
CVE-2007-6729
Cross-site scripting XSS vulnerability in the web management interface in the ZyXEL P-330W router allows remote attackers to inject arbitrary web script or HTML via the pingstr parameter and other unspecified vectors...
Cross site scripting
Cross-site scripting XSS vulnerability in the web management interface in the ZyXEL P-330W router allows remote attackers to inject arbitrary web script or HTML via the pingstr parameter and other unspecified vectors...
CVE-2007-6730
CVE-2007-6730 affects ZyXEL P-330W router via the web management interface, introducing CSRF vulnerabilities that allow remote attackers to hijack administrator authentication for (1) enabling remote router management through goform/formRmtMgt, and (2) changing the administrator password via gofo...
CVE-2007-6729
The CVE-2007-6729 entry describes a Cross-site scripting (XSS) vulnerability in the web management interface of the ZyXEL P-330W router. The flaw allows remote attackers to inject arbitrary web script or HTML via the pingstr parameter and other vectors. Connected sources confirm the affected prod...
CVE-2007-6729
Cross-site scripting XSS vulnerability in the web management interface in the ZyXEL P-330W router allows remote attackers to inject arbitrary web script or HTML via the pingstr parameter and other unspecified vectors...
CVE-2007-6729: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the web management interface in the ZyXEL P-330W router allows remote attackers to inject arbitrary web script or HTML via the pingstr parameter and other unspecified vectors...