CVE-2007-6707

Cisco Linksys WAG54GS <1.01.03 - XSS

Title source: llm

Description

Multiple cross-site scripting (XSS) vulnerabilities on the Cisco Linksys WAG54GS Wireless-G ADSL Gateway with 1.01.03 and earlier firmware allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different issue than CVE-2007-3574.

References (5)

[Exploit] http://www.gnucitizen.org/blog/persistent-xss-and-csrf-on-wireless-g-adsl-gateway-with-speedbooster-wag54gs/

[Exploit] http://www.gnucitizen.org/projects/router-hacking-challenge/

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/41270

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/archive/1/489009/100/0/threaded

[Third Party Advisory, VDB Entry] http://osvdb.org/43539

Scores

EPSS 0.0034

EPSS Percentile 56.4%

Classification

CWE

CWE-79

Status draft

Affected Products (1)

linksys/wag54gs < firmware_1.01.03

Timeline

Published Mar 13, 2008

Tracked Since Feb 18, 2026