Unscored severity · published Sep 21, 2007
CVE-2007-5027
Multiple cross-site scripting (XSS) vulnerabilities in cgi-bin/ddns in the web management panel for the WBR3404TX broadband router with firmware R1.94p0vTIG allow remote attackers…
–
CVSS
1.7%
EPSS
No
On KEV
Description
Multiple cross-site scripting (XSS) vulnerabilities in cgi-bin/ddns in the web management panel for the WBR3404TX broadband router with firmware R1.94p0vTIG allow remote attackers to inject arbitrary web script or HTML via the (1) DD or (2) DU parameter.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.7% · higher than 77% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
WB
Wbr3404tx · Level One
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-5027
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-5027
osvdb.org
http://osvdb.org/38886
securityreason.com
http://securityreason.com/securityalert/3159
www.securityfocus.com
http://www.securityfocus.com/archive/1/479994/100/0/threaded
www.securityfocus.com
http://www.securityfocus.com/bid/25738
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/36696