CVE-2014-0620

Technicolor TC7200 (STD6.01.12) is affected by multiple cross-site scripting (XSS) vulnerabilities. The issues arise from unsanitized input in (1) ADDNewDomain to parental/website-filters.asp and (2) VmTracerouteHost to goform/status/diagnostics-route, enabling remote attackers to inject scripts ...