Skip to content
OpenAdvisories
Unscored CVE-2015-6017 EUVD-2015-5960GHSA-gjp7-cxjr-8j3h

Multiple cross-site scripting (XSS) vulnerabilities in Forms/rpAuth_1 on ZyXEL P-660HW-T1 2 devices with ZyNOS firmware 3.40(AXH.0) allow r…

Published Dec 31, 2015 · Updated Aug 6, 2024 · Assigned by certcc

Description

Multiple cross-site scripting (XSS) vulnerabilities in Forms/rpAuth_1 on ZyXEL P-660HW-T1 2 devices with ZyNOS firmware 3.40(AXH.0) allow remote attackers to inject arbitrary web script or HTML via the (1) LoginPassword or (2) hiddenPassword parameter.

References