CVE-2007-5027

Multiple cross-site scripting XSS vulnerabilities in cgi-bin/ddns in the web management panel for the WBR3404TX broadband router with firmware R1.94p0vTIG allow remote attackers to inject arbitrary web script or HTML via the 1 DD or 2 DU parameter...

CVE-2007-5027

Multiple cross-site scripting XSS vulnerabilities in cgi-bin/ddns in the web management panel for the WBR3404TX broadband router with firmware R1.94p0vTIG allow remote attackers to inject arbitrary web script or HTML via the 1 DD or 2 DU parameter...

wbr-xss.txt

I.Overview Current firmware version is R1.94p0vTIG the latest. WBR3404TX Broadband Router Web Management II.Description http://routeraddress/cgi-bin/ddns?RC=%40&DG0=x&DP=D&DD=%22%3E%3Cscript%3Ealert'xss%20detected!';%3C/script%3E%3Ctext%20id=%22&DU=&DW=...