CVE-2007-3574

Linksys WAG54GS 1.00.06 - Cross-Site Scripting via setup.cgi Parameters

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2007-3574. PoCs published by Petko Petkov.

AI-analyzed exploit summary The provided text describes a cross-site scripting (XSS) vulnerability in Linksys Wireless-G ADSL Gateway WAG54GS firmware V1.00.06. It includes a malicious URI example but lacks executable exploit code.

Description

Multiple cross-site scripting (XSS) vulnerabilities in setup.cgi on the Cisco Linksys WAG54GS Wireless-G ADSL Gateway with 1.00.06 firmware allow remote attackers to inject arbitrary web script or HTML via the (1) c4_trap_ip_, (2) devname, (3) snmp_getcomm, or (4) snmp_setcomm parameter.

Exploits (1)

exploitdb WRITEUP VERIFIED

by Petko Petkov · textremotehardware

https://www.exploit-db.com/exploits/30254

View Code ZIP pw:eip

The provided text describes a cross-site scripting (XSS) vulnerability in Linksys Wireless-G ADSL Gateway WAG54GS firmware V1.00.06. It includes a malicious URI example but lacks executable exploit code.

Classification

Writeup 90%

Attack Type

Xss

Complexity

Trivial

Reliability

Theoretical

Target: Linksys Wireless-G ADSL Gateway WAG54GS firmware V1.00.06

Auth required

Prerequisites: Access to the admin interface · Victim interaction to open malicious URI

MITRE ATT&CK