← back
CVE-2007-5562

CVE-2007-5562

EPSS 1.8%
Cross-site scripting (XSS) vulnerability in cgi-bin/welcome (aka the login page) in Netgear SSL312 PROSAFE SSL VPN-Concentrator 25 allows remote attackers to inject arbitrary web script or HTML via the err parameter in the context of an error page.
Affected products
n/a · n/a
public PoCs found — 1
exploitdbwww.exploit-db.com/exploits/30673unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://archives.neohapsis.com/archives/fulldisclosure/2007-10/0358.htmlhttp://secunia.com/advisories/27238http://securitytracker.com/id?1018817https://exchange.xforce.ibmcloud.com/vulnerabilities/37216http://www.securityfocus.com/bid/26073http://www.smash-the-stack.net/articles/Netgear_SSL312_XSS_Advisory.txthttp://www.vupen.com/english/advisories/2007/3542