Linksys Firmware CVE-2010-2506 Cross-Site Scripting Vulnerability
BID:73603
Info
Linksys Firmware CVE-2010-2506 Cross-Site Scripting Vulnerability
| Bugtraq ID: | 73603 |
| Class: | Input Validation Error |
| CVE: |
CVE-2010-2506 |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 28 2010 12:00AM |
| Updated: | Jun 28 2010 12:00AM |
| Credit: | Unknown |
| Vulnerable: |
Cisco Linksys Wap54g 0 Cisco Linksys Firmware 3.05.03 Cisco Linksys Firmware 3.04.03 |
| Not Vulnerable: | |
Discussion
Linksys Firmware CVE-2010-2506 Cross-Site Scripting Vulnerability
Linksys Firmware is prone to a cross-site scripting vulnerability. Cross-site scripting (XSS) vulnerability in debug.cgi in Linksys WAP54Gv3 firmware 3.05.03 and 3.04.03 allows remote attackers to inject arbitrary web script or HTML via the data1 parameter.
Linksys Firmware is prone to a cross-site scripting vulnerability. Cross-site scripting (XSS) vulnerability in debug.cgi in Linksys WAP54Gv3 firmware 3.05.03 and 3.04.03 allows remote attackers to inject arbitrary web script or HTML via the data1 parameter.
Exploit / POC
Linksys Firmware CVE-2010-2506 Cross-Site Scripting Vulnerability
An attacker can exploit this issue by enticing an unsuspecting victim to follow a malicious URI.
An attacker can exploit this issue by enticing an unsuspecting victim to follow a malicious URI.
Solution / Fix
Linksys Firmware CVE-2010-2506 Cross-Site Scripting Vulnerability
Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or you are aware of more recent information, please mail us at: [email protected]
Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or you are aware of more recent information, please mail us at: [email protected]