Description
Cross-site scripting (XSS) vulnerability in the log viewer in NETGEAR FVS318 running firmware 2.4, and possibly other versions, allows remote attackers to inject arbitrary web script or HTML via a blocked URL phrase.
References
- 20050117 Multiple Vulnerabilities in Netgear FVS318 Router mailing-list
- 12278 vdb-entry
- 13787 third-party-advisory
- netgear-fvs318-log-xss(18921) vdb-entry
- 20050117 Multiple Vulnerabilities in Netgear FVS318 Router mailing-list
- 13012 vdb-entry
- 1012913 vdb-entry
- http://www.securinews.com/vuln.htm?vulnid=103