CVE-2006-3974

EPSS 1.8%

Cross-site scripting (XSS) vulnerability in cgi-bin/admin in 3Com OfficeConnect Secure Router with firmware 1.04-168 allows remote attackers to inject arbitrary web script or HTML via the tk parameter.

Affected products

n/a · n/a

public PoCs found — 1

exploitdbwww.exploit-db.com/exploits/30164unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://osvdb.org/36888 http://secunia.com/advisories/21255 http://secunia.com/secunia_research/2006-60/advisory/https://exchange.xforce.ibmcloud.com/vulnerabilities/34776 http://www.securityfocus.com/bid/24374 http://www.vupen.com/english/advisories/2007/2103