Unscored CVE-2011-0746 EUVD-2011-0758GHSA-49wr-6x3m-4p8x

Cross-site request forgery (CSRF) vulnerability in Forms/PortForwarding_Edit_1 on the ZyXEL O2 DSL Router Classic allows remote attackers t…

Published Apr 13, 2011 · Updated Aug 6, 2024 · Assigned by mitre

Description

Cross-site request forgery (CSRF) vulnerability in Forms/PortForwarding_Edit_1 on the ZyXEL O2 DSL Router Classic allows remote attackers to hijack the authentication of administrators for requests that insert cross-site scripting (XSS) sequences via the PortRule_Name parameter.

References

8198 third-party-advisory
20110407 O2 classic router: persistent cross site scripting (XSS) and cross site request forgery (CSRF) mailing-list
http://int21.de/cve/CVE-2011-0746-o2-router.html