Description
Cross-site scripting (XSS) vulnerability in cgi-bin/webif.exe in ifnet WebIf allows remote attackers to inject arbitrary web script or HTML via the cmd parameter.
References
- 20071022 ifnet.it WEBIF XSS Vulnerability mailing-list
- webif-cmd-xss(37367) vdb-entry
- 27365 third-party-advisory
- 26164 vdb-entry
- 20071022 Re: [Full-disclosure] ifnet.it WEBIF XSS Vulnerability mailing-list