CVE-2006-3929

Zyxel Prestige 660H-61 - Cross-Site Scripting via Hex-Encoded a Parameter

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2006-3929. PoCs published by jose.palanco.

AI-analyzed exploit summary The exploit describes a cross-site scripting (XSS) vulnerability in the Zyxel Prestige 660H-61 ADSL Router due to improper input sanitization. The provided URL demonstrates the injection of arbitrary script code via the 'a' parameter.

Description

Cross-site scripting (XSS) vulnerability in the Forms/rpSysAdmin script on the Zyxel Prestige 660H-61 ADSL Router running firmware 3.40(PT.0)b32 allows remote attackers to inject arbitrary web script or HTML via hex-encoded values in the a parameter.

Exploits (1)

exploitdb WRITEUP

by jose.palanco · textwebappshardware

https://www.exploit-db.com/exploits/28283

View Code ZIP pw:eip

The exploit describes a cross-site scripting (XSS) vulnerability in the Zyxel Prestige 660H-61 ADSL Router due to improper input sanitization. The provided URL demonstrates the injection of arbitrary script code via the 'a' parameter.

Classification

Writeup 90%

Attack Type

Xss

Complexity

Trivial

Reliability

Reliable

Target: Zyxel Prestige 660H-61 ADSL Router

No auth needed

Prerequisites: Access to the router's web interface

MITRE ATT&CK