CVE-2007-4318

Cross-site scripting (XSS) vulnerability in Forms/General_1 in the management interface in ZyNOS firmware 3.62(WK.6) on the Zyxel Zywall 2 device allows remote authenticated administrators to inject arbitrary web script or HTML via the sysSystemName parameter.
Configurations

Configuration 1 (hide)

OR cpe:2.3:h:zyxel:zynos:3.62:*:*:*:*:*:*:*
cpe:2.3:h:zyxel:zywall_2:*:*:*:*:*:*:*:*

History

21 Nov 2024, 00:35

Type Values Removed Values Added
References () http://osvdb.org/38721 - () http://osvdb.org/38721 -
References () http://secunia.com/advisories/26381 - () http://secunia.com/advisories/26381 -
References () http://securityreason.com/securityalert/3002 - () http://securityreason.com/securityalert/3002 -
References () http://www.louhi.fi/advisory/zyxel_070810.txt - () http://www.louhi.fi/advisory/zyxel_070810.txt -
References () http://www.securityfocus.com/archive/1/476031/100/0/threaded - () http://www.securityfocus.com/archive/1/476031/100/0/threaded -
References () http://www.securityfocus.com/bid/25262 - Exploit () http://www.securityfocus.com/bid/25262 - Exploit
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/35913 - () https://exchange.xforce.ibmcloud.com/vulnerabilities/35913 -

Information

Published : 2007-08-13 21:17

Updated : 2024-11-21 00:35


NVD link : CVE-2007-4318

Mitre link : CVE-2007-4318

CVE.ORG link : CVE-2007-4318


JSON object : View

Products Affected

zyxel

  • zywall_2
  • zynos