8 matches found
CVE-2010-0607
Cross-site scripting XSS vulnerability in Forms/statusstatistics1 in the Sterlite SAM300 AX Router allows remote attackers to inject arbitrary web script or HTML via the StatRadio parameter...
Cross site scripting
Cross-site scripting XSS vulnerability in Forms/statusstatistics1 in the Sterlite SAM300 AX Router allows remote attackers to inject arbitrary web script or HTML via the StatRadio parameter...
CVE-2010-0607
Cross-site scripting XSS vulnerability in Forms/statusstatistics1 in the Sterlite SAM300 AX Router allows remote attackers to inject arbitrary web script or HTML via the StatRadio parameter...
CVE-2010-0607
CVE-2010-0607 is an XSS vulnerability in the Sterlite SAM300 AX Router, affecting the Forms/status_statistics_1 function. The issue allows remote attackers to inject arbitrary web script or HTML via the Stat_Radio parameter. Documents confirm the affected component and the root cause (unvalidated...
CVE-2010-0607
Cross-site scripting XSS vulnerability in Forms/statusstatistics1 in the Sterlite SAM300 AX Router allows remote attackers to inject arbitrary web script or HTML via the StatRadio parameter...
CVE-2010-0607: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in Forms/statusstatistics1 in the Sterlite SAM300 AX Router allows remote attackers to inject arbitrary web script or HTML via the StatRadio parameter...
Sterlite SAM300 AX Router - Stat_Radio Cross-Site Scripting
Sterlite SAM300 AX Router - StatRadio Cross-Site Scripting source: https://www.securityfocus.com/bid/39928/info The Sterlite SAM300 AX Router is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to have...
Sterlite SAM300 AX Router - 'Stat_Radio' Cross-Site Scripting
source: https://www.securityfocus.com/bid/39928/info The Sterlite SAM300 AX Router is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspectin...