packetstormsecurity.com
http://packetstormsecurity.com/files/129374/ADSL2-2.05.C29GV-XSS-URL-Redirect-Command-Injection.html CVE-2014-9143
Technicolor DT5130 2.05.C29GV - Multiple Vulnerabilities
Record summary
CVE-2014-9143 has a selected CVSS score of 4.3; EIP currently links 1 catalogued exploit.
Description
Open redirect vulnerability in Technicolor Router TD5130 with firmware 2.05.C29GV allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the failrefer parameter.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBTechnicolor DT5130 2.05.C29GV - Multiple VulnerabilitiesExploitDB exploitby CrashNot analyzed1 file
References
435462exploit
http://www.exploit-db.com/exploits/35462 20141203 Wireless N ADSL 2/2+ Modem Router - DT5130 - Xss / URL Redirect / Command Injectionmailing list
http://www.securityfocus.com/archive/1/534143/100/0/threaded nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2014-9143