Description
Multiple cross-site scripting (XSS) vulnerabilities in the Thomson/Alcatel SpeedTouch 7G router, as used for the BT Home Hub 6.2.6.B and earlier, allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
References
- 3213 third-party-advisory
- 25972 vdb-entry
- 20071008 BT Home Flub: Pwnin the BT Home Hub mailing-list
- http://www.gnucitizen.org/blog/bt-home-flub-pwnin-the-bt-home-hub
- http://www.theregister.co.uk/2007/10/09/bt_home_hub_vuln/