Unscored CVE-2008-1243 EUVD-2008-1251GHSA-wcw5-gwq3-p3v8

Cross-site scripting (XSS) vulnerability on the Linksys WRT300N router with firmware 2.00.20, when Mozilla Firefox or Apple Safari is used,…

Published Mar 10, 2008 · Updated Aug 7, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability on the Linksys WRT300N router with firmware 2.00.20, when Mozilla Firefox or Apple Safari is used, allows remote attackers to inject arbitrary web script or HTML via the dyndns_domain parameter to the default URI.

References

20080301 The Router Hacking Challenge is Over! mailing-list
http://www.gnucitizen.org/projects/router-hacking-challenge/
http://code.bulix.org/cx46qa-65489
linksys-wrt300n-dyndnsdomain-xss(41121) vdb-entry
http://code.bulix.org/koom78-65490