CVE-2014-5438

LOW · 3.5 CVSS Gepubliceerd: 17-12-2014 CWE-79

Beschrijving NL

Cross-site scripting (XSS) kwetsbaarheid in arris Touchstone TG862G/CT Telephony Gateway met firmware 7.6.59S.CT en eerder stelt op afstand geverifieerde gebruikers in staat om willekeurig webscript of HTML via de parameter computer_name te injecteren in connected_devices_computers_edit.php.

Origineel (Engels) tonen

Cross-site scripting (XSS) vulnerability in ARRIS Touchstone TG862G/CT Telephony Gateway with firmware 7.6.59S.CT and earlier allows remote authenticated users to inject arbitrary web script or HTML via the computer_name parameter to connected_devices_computers_edit.php.

Vendors

Arris

Affected products

Touchstone Tg862g/ct Firmware Touchstone Tg862g/ct

References

seclists.org