CVE-2007-6729

ZyXEL P-330W Router - Cross-Site Scripting via pingstr Parameter

Title source: llm
STIX 2.1

Description

Cross-site scripting (XSS) vulnerability in the web management interface in the ZyXEL P-330W router allows remote attackers to inject arbitrary web script or HTML via the pingstr parameter and other unspecified vectors.

References (3)

Core 3
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/27024
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/28172
Exploit mailing-list x_refsource_fulldisc
http://seclists.org/fulldisclosure/2007/Dec/0559.html

Scores

EPSS 0.0030
EPSS Percentile 53.1%

Details

CWE
CWE-79
Status published
Products (1)
zyxel/p-330w_router
Published Sep 10, 2009
Tracked Since Feb 18, 2026