Exploitation Summary
EIP tracks 1 public exploit for CVE-2004-1789. PoCs published by Rafel Ivgi.
AI-analyzed exploit summary This exploit demonstrates a cross-site scripting (XSS) vulnerability in ZyWALL 10 firewalls via the web management interface. The PoC shows how an attacker can inject malicious JavaScript code into the URL, which is then rendered in the victim's browser.
Description
Cross-site scripting (XSS) vulnerability in the web management interface in ZyWALL 10 4.07 allows remote attackers to inject arbitrary web script or HTML via the rpAuth_1 page.
Exploits (1)
This exploit demonstrates a cross-site scripting (XSS) vulnerability in ZyWALL 10 firewalls via the web management interface. The PoC shows how an attacker can inject malicious JavaScript code into the URL, which is then rendered in the victim's browser.