CVE-2004-1747

CVE-2004-1747 describes a cross-site scripting (XSS) vulnerability in the NetworkEverywhere NR041 router firmware 1.2 Release 03. The vulnerability arises from accepting input via the DHCP HOSTNAME option, which can be reflected into the web UI, allowing remote attackers to inject arbitrary web s...