CVE-2008-6280

The vulnerability affects the Linksys WRT160N router, exposed through the apply.cgi utility. The root cause is an XSS flaw in the DHCP_Static path caused by unsanitized input via the action parameter, allowing remote attackers to inject arbitrary web script or HTML. According to the sources, the ...

CVE-2009-2073

The CVE-2009-2073 entry concerns the Linksys WRT160N family (hardware 1 and firmware 1.02.2). The vulnerability is described as a Cross-site Request Forgery (CSRF) that allows remote attackers to hijack the authentication of other users to perform unspecified requests; the administrator privilege...