Unscored CVE-2014-5438 EUVD-2014-5326GHSA-4g6h-88c9-r2f6

Cross-site scripting (XSS) vulnerability in ARRIS Touchstone TG862G/CT Telephony Gateway with firmware 7.6.59S.CT and earlier allows remote…

Published Dec 17, 2014 · Updated Aug 6, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in ARRIS Touchstone TG862G/CT Telephony Gateway with firmware 7.6.59S.CT and earlier allows remote authenticated users to inject arbitrary web script or HTML via the computer_name parameter to connected_devices_computers_edit.php.

References

20141216 CVE-2014-5438: Arris TG862G - Cross-site Scripting (XSS) mailing-list