Vulnerability Details CVE-2008-1257
Cross-site scripting (XSS) vulnerability in Forms/DiagGeneral_2 on the ZyXEL P-660HW series router allows remote attackers to inject arbitrary web script or HTML via the PingIPAddr parameter.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 48.7%
CVSS Severity
CVSS v2 Score 4.3
References
- http://www.gnucitizen.org/projects/router-hacking-challenge/
- http://www.securityfocus.com/archive/1/489009/100/0/threaded
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41109
- http://www.gnucitizen.org/projects/router-hacking-challenge/
- http://www.securityfocus.com/archive/1/489009/100/0/threaded
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41109
Products affected by CVE-2008-1257
-
cpe:2.3:h:zyxel:p-660hw:_t1
-
cpe:2.3:h:zyxel:p-660hw_d1:-
-
cpe:2.3:h:zyxel:p-660hw_d1:v2
-
cpe:2.3:h:zyxel:p-660hw_d3:-
-
cpe:2.3:h:zyxel:p-660hw_t3:-
-
cpe:2.3:h:zyxel:p-660hw_t3:v2