Vulnerability-Lookup

Search criteria

Vendor

Product

Assigner

Sources

Sort by

Order

Apply ordering (override relevance)

VAR-201210-0417

Vulnerability from variot - Updated: 2025-04-11 21:57

Cross-site request forgery (CSRF) vulnerability in webconfig/admin_passwd/passwd.html/admin_passwd in Xavi X7968 allows remote attackers to hijack the authentication of administrators for requests that change the administrator password via the sysUserName, sysPassword, and sysCfmPwd parameters. The Xavi 7968 ADSL Router is an ADSL router device. There is a vulnerability in the Xavi 7968 ADSL Router. Because the program fails to properly validate user-submitted requests, an attacker can build a malicious URI, trick the user into parsing, and run privileged commands on the device, such as changing the configuration, performing a denial of service attack, or injecting arbitrary script code. Xavi 7968 ADSL Router is prone to cross-site scripting, HTML-injection and cross-site request forgery vulnerabilities. The attacker can exploit the issues to execute arbitrary script code in the context of the vulnerable site, potentially allowing the attacker to steal cookie-based authentication credentials, or perform certain administrative functions on victim's behalf. Other attacks are also possible. ----------------------------------------------------------------------

Become a PSI 3.0 beta tester! Test-drive the new beta version and tell us what you think about its extended automatic update function and significantly enhanced user-interface. Download it here! http://secunia.com/psi_30_beta_launch

TITLE: XAVi X7968 Cross-Site Scripting and Request Forgery Vulnerabilities

SECUNIA ADVISORY ID: SA48050

VERIFY ADVISORY: Secunia.com http://secunia.com/advisories/48050/ Customer Area (Credentials Required) https://ca.secunia.com/?page=viewadvisory&vuln_id=48050

RELEASE DATE: 2012-03-06

DISCUSS ADVISORY: http://secunia.com/advisories/48050/#comments

AVAILABLE ON SITE AND IN CUSTOMER AREA: * Last Update * Popularity * Comments * Criticality Level * Impact * Where * Solution Status * Operating System / Software * CVE Reference(s)

http://secunia.com/advisories/48050/

ONLY AVAILABLE IN CUSTOMER AREA: * Authentication Level * Report Reliability * Secunia PoC * Secunia Analysis * Systems Affected * Approve Distribution * Remediation Status * Secunia CVSS Score * CVSS

https://ca.secunia.com/?page=viewadvisory&vuln_id=48050

ONLY AVAILABLE WITH SECUNIA CSI AND SECUNIA PSI: * AUTOMATED SCANNING

http://secunia.com/vulnerability_scanning/personal/ http://secunia.com/vulnerability_scanning/corporate/wsus_sccm_3rd_third_party_patching/

DESCRIPTION: Two vulnerabilities have been reported in XAVi X7968, which can be exploited by malicious people to conduct cross-site scripting and request forgery attacks.

1) Input passed via the "pvcName" parameter to webconfig/wan/confirm.html/confirm is not properly sanitised before being returned to the user. This can be exploited to execute arbitrary HTML and script code in a user's browser session in context of an affected device.

2) The device's web interface allows users to perform certain actions via HTTP requests without performing any validity checks to verify the requests. This can be exploited to e.g. change an administrator's password or conduct script insertion attacks by tricking a logged in administrator into visiting a malicious web site.

SOLUTION: Filter malicious characters and character sequences using a proxy. Do not browse untrusted sites or follow untrusted links while being logged-in to the device.

PROVIDED AND/OR DISCOVERED BY: Busindre

OTHER REFERENCES: Further details available in Customer Area: http://secunia.com/vulnerability_intelligence/

DEEP LINKS: Further details available in Customer Area: http://secunia.com/vulnerability_intelligence/

EXTENDED DESCRIPTION: Further details available in Customer Area: http://secunia.com/vulnerability_intelligence/

EXTENDED SOLUTION: Further details available in Customer Area: http://secunia.com/vulnerability_intelligence/

EXPLOIT: Further details available in Customer Area: http://secunia.com/vulnerability_intelligence/

About: This Advisory was delivered by Secunia as a free service to help private users keeping their systems up to date against the latest vulnerabilities.

Subscribe: http://secunia.com/advisories/secunia_security_advisories/

Definitions: (Criticality, Where etc.) http://secunia.com/advisories/about_secunia_advisories/

Please Note: Secunia recommends that you verify all advisories you receive by clicking the link. Secunia NEVER sends attached files with advisories. Secunia does not advise people to install third party patches, only use those supplied by the vendor.

Unsubscribe: Secunia Security Advisories http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org

. (Admin privileges)

** XSS example: (Alert with Cookie)

http://192.168.1.1/webconfig/wan/confirm.html/confirm?context=pageAction%3Dadd%26pvcName%3D%2522%253e%253c%252ftd%253e%253cscript%253ealert%28document.cookie%29%253c%252fscript%253e%26vpi%3D0%26vci%3D38%26scat%3DUBR%26accessmode%3Dpppoe%26encap%3Dvcmux%26encapmode%3Dbridged%26iptype%3Ddhcp%26nat_enable%3Dfalse%26def_route_enable%3Dfalse%26qos_enable%3Dfalse%26chkPPPOEAC%3Dfalse%26tBoxPPPOEAC%3DNot%2520Configured%26sessiontype%3Dalways_on%26username%3Da%26password%3Dss&confirm=+Apply+

** Persistent XSS example: (Alert with Cookie)

Add code: http://192.168.1.1/webconfig/lan/lan_config.html/local_lan_config?ip_add_txtbox=192.168.1.1&sub_mask_txtbox=255.255.255.0&host_name_txtbox=Hackalert(document.cookie)&domain_name_txtbox=local.lan&mtu_txtbox=1500&next=Apply Exploit URL: http://192.168.1.1/webconfig/upgrade_image/image_upgrade.html

** Cross site request forgery example: (Change admin Password 1234 -> 12345):

http://192.168.1.2/webconfig/admin_passwd/passwd.html/admin_passwd?sysUserName=1234&sysPassword=12345&sysCfmPwd=12345&cmdSubmit=Apply

This is just an example, all forms in the router interface are vulnerable to CSRF and if they accept text input, to XSS.

Author: Busindre busilezas[@]gmail.com

Show details on source website

JSON

To clipboard

{
  "affected_products": {
    "_id": null,
    "data": [
      {
        "_id": null,
        "model": "x7968",
        "scope": "eq",
        "trust": 1.6,
        "vendor": "xavi",
        "version": null
      },
      {
        "_id": null,
        "model": "adsl router",
        "scope": "eq",
        "trust": 0.9,
        "vendor": "xavi",
        "version": "79680"
      },
      {
        "_id": null,
        "model": "x7968",
        "scope": null,
        "trust": 0.8,
        "vendor": "xavi",
        "version": null
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2012-0821"
      },
      {
        "db": "BID",
        "id": "52098"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2012-004829"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201210-088"
      },
      {
        "db": "NVD",
        "id": "CVE-2012-5323"
      }
    ]
  },
  "configurations": {
    "_id": null,
    "data": [
      {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "cpe_match": [
              {
                "cpe22Uri": "cpe:/h:xavi:x7968",
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      }
    ],
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2012-004829"
      }
    ]
  },
  "credits": {
    "_id": null,
    "data": "Busindre",
    "sources": [
      {
        "db": "BID",
        "id": "52098"
      },
      {
        "db": "PACKETSTORM",
        "id": "109987"
      }
    ],
    "trust": 0.4
  },
  "cve": "CVE-2012-5323",
  "cvss": {
    "_id": null,
    "data": [
      {
        "cvssV2": [
          {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "author": "nvd@nist.gov",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "exploitabilityScore": 8.6,
            "id": "CVE-2012-5323",
            "impactScore": 6.4,
            "integrityImpact": "PARTIAL",
            "severity": "MEDIUM",
            "trust": 1.8,
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          }
        ],
        "cvssV3": [],
        "severity": [
          {
            "author": "nvd@nist.gov",
            "id": "CVE-2012-5323",
            "trust": 1.0,
            "value": "MEDIUM"
          },
          {
            "author": "NVD",
            "id": "CVE-2012-5323",
            "trust": 0.8,
            "value": "Medium"
          },
          {
            "author": "CNNVD",
            "id": "CNNVD-201210-088",
            "trust": 0.6,
            "value": "MEDIUM"
          }
        ]
      }
    ],
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2012-004829"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201210-088"
      },
      {
        "db": "NVD",
        "id": "CVE-2012-5323"
      }
    ]
  },
  "description": {
    "_id": null,
    "data": "Cross-site request forgery (CSRF) vulnerability in webconfig/admin_passwd/passwd.html/admin_passwd in Xavi X7968 allows remote attackers to hijack the authentication of administrators for requests that change the administrator password via the sysUserName, sysPassword, and sysCfmPwd parameters. The Xavi 7968 ADSL Router is an ADSL router device. There is a vulnerability in the Xavi 7968 ADSL Router. Because the program fails to properly validate user-submitted requests, an attacker can build a malicious URI, trick the user into parsing, and run privileged commands on the device, such as changing the configuration, performing a denial of service attack, or injecting arbitrary script code. Xavi 7968 ADSL Router is prone to cross-site scripting, HTML-injection and cross-site request forgery vulnerabilities. \nThe attacker can exploit the issues to execute arbitrary script code in the context of the vulnerable site, potentially allowing the attacker to steal cookie-based authentication credentials, or perform certain administrative functions on victim\u0027s behalf. Other attacks are also possible. ----------------------------------------------------------------------\n\nBecome a PSI 3.0 beta tester!\nTest-drive the new beta version and tell us what you think about its extended automatic update function and significantly enhanced user-interface. \nDownload it here!\nhttp://secunia.com/psi_30_beta_launch\n\n----------------------------------------------------------------------\n\nTITLE:\nXAVi X7968 Cross-Site Scripting and Request Forgery Vulnerabilities\n\nSECUNIA ADVISORY ID:\nSA48050\n\nVERIFY ADVISORY:\nSecunia.com\nhttp://secunia.com/advisories/48050/\nCustomer Area (Credentials Required)\nhttps://ca.secunia.com/?page=viewadvisory\u0026vuln_id=48050\n\nRELEASE DATE:\n2012-03-06\n\nDISCUSS ADVISORY:\nhttp://secunia.com/advisories/48050/#comments\n\nAVAILABLE ON SITE AND IN CUSTOMER AREA:\n * Last Update\n * Popularity\n * Comments\n * Criticality Level\n * Impact\n * Where\n * Solution Status\n * Operating System / Software\n * CVE Reference(s)\n\nhttp://secunia.com/advisories/48050/\n\nONLY AVAILABLE IN CUSTOMER AREA:\n * Authentication Level\n * Report Reliability\n * Secunia PoC\n * Secunia Analysis\n * Systems Affected\n * Approve Distribution\n * Remediation Status\n * Secunia CVSS Score\n * CVSS\n\nhttps://ca.secunia.com/?page=viewadvisory\u0026vuln_id=48050\n\nONLY AVAILABLE WITH SECUNIA CSI AND SECUNIA PSI:\n * AUTOMATED SCANNING\n\nhttp://secunia.com/vulnerability_scanning/personal/\nhttp://secunia.com/vulnerability_scanning/corporate/wsus_sccm_3rd_third_party_patching/\n\nDESCRIPTION:\nTwo vulnerabilities have been reported in XAVi X7968, which can be\nexploited by malicious people to conduct cross-site scripting and\nrequest forgery attacks. \n\n1) Input passed via the \"pvcName\" parameter to\nwebconfig/wan/confirm.html/confirm is not properly sanitised before\nbeing returned to the user. This can be exploited to execute\narbitrary HTML and script code in a user\u0027s browser session in context\nof an affected device. \n\n2) The device\u0027s web interface allows users to perform certain actions\nvia HTTP requests without performing any validity checks to verify the\nrequests. This can be exploited to e.g. change an administrator\u0027s\npassword or conduct script insertion attacks by tricking a logged in\nadministrator into visiting a malicious web site. \n\nSOLUTION:\nFilter malicious characters and character sequences using a proxy. Do\nnot browse untrusted sites or follow untrusted links while being\nlogged-in to the device. \n\nPROVIDED AND/OR DISCOVERED BY:\nBusindre\n\nOTHER REFERENCES:\nFurther details available in Customer Area:\nhttp://secunia.com/vulnerability_intelligence/\n\nDEEP LINKS:\nFurther details available in Customer Area:\nhttp://secunia.com/vulnerability_intelligence/\n\nEXTENDED DESCRIPTION:\nFurther details available in Customer Area:\nhttp://secunia.com/vulnerability_intelligence/\n\nEXTENDED SOLUTION:\nFurther details available in Customer Area:\nhttp://secunia.com/vulnerability_intelligence/\n\nEXPLOIT:\nFurther details available in Customer Area:\nhttp://secunia.com/vulnerability_intelligence/\n\n----------------------------------------------------------------------\n\nAbout:\nThis Advisory was delivered by Secunia as a free service to help\nprivate users keeping their systems up to date against the latest\nvulnerabilities. \n\nSubscribe:\nhttp://secunia.com/advisories/secunia_security_advisories/\n\nDefinitions: (Criticality, Where etc.)\nhttp://secunia.com/advisories/about_secunia_advisories/\n\n\nPlease Note:\nSecunia recommends that you verify all advisories you receive by\nclicking the link. \nSecunia NEVER sends attached files with advisories. \nSecunia does not advise people to install third party patches, only\nuse those supplied by the vendor. \n\n----------------------------------------------------------------------\n\nUnsubscribe: Secunia Security Advisories\nhttp://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org\n\n----------------------------------------------------------------------\n\n\n. (Admin privileges)\n\n\n** XSS example: (Alert with Cookie)\n\nhttp://192.168.1.1/webconfig/wan/confirm.html/confirm?context=pageAction%3Dadd%26pvcName%3D%2522%253e%253c%252ftd%253e%253cscript%253ealert%28document.cookie%29%253c%252fscript%253e%26vpi%3D0%26vci%3D38%26scat%3DUBR%26accessmode%3Dpppoe%26encap%3Dvcmux%26encapmode%3Dbridged%26iptype%3Ddhcp%26nat_enable%3Dfalse%26def_route_enable%3Dfalse%26qos_enable%3Dfalse%26chkPPPOEAC%3Dfalse%26tBoxPPPOEAC%3DNot%2520Configured%26sessiontype%3Dalways_on%26username%3Da%26password%3Dss\u0026confirm=+Apply+\n\n\n** Persistent XSS example: (Alert with Cookie)\n\nAdd code: http://192.168.1.1/webconfig/lan/lan_config.html/local_lan_config?ip_add_txtbox=192.168.1.1\u0026sub_mask_txtbox=255.255.255.0\u0026host_name_txtbox=Hack\u003cSCRIPT\u003ealert(document.cookie)\u003c/script\u003e\u0026domain_name_txtbox=local.lan\u0026mtu_txtbox=1500\u0026next=Apply\nExploit URL:  http://192.168.1.1/webconfig/upgrade_image/image_upgrade.html\n\n\n** Cross site request forgery example: (Change admin Password 1234 -\u003e 12345):\n\nhttp://192.168.1.2/webconfig/admin_passwd/passwd.html/admin_passwd?sysUserName=1234\u0026sysPassword=12345\u0026sysCfmPwd=12345\u0026cmdSubmit=Apply\n\n\nThis is just an example, all forms in the router interface are vulnerable to CSRF and if they accept text input, to XSS. \n\n\n\nAuthor: Busindre busilezas[@]gmail.com\n",
    "sources": [
      {
        "db": "NVD",
        "id": "CVE-2012-5323"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2012-004829"
      },
      {
        "db": "CNVD",
        "id": "CNVD-2012-0821"
      },
      {
        "db": "BID",
        "id": "52098"
      },
      {
        "db": "PACKETSTORM",
        "id": "110506"
      },
      {
        "db": "PACKETSTORM",
        "id": "109987"
      }
    ],
    "trust": 2.61
  },
  "external_ids": {
    "_id": null,
    "data": [
      {
        "db": "NVD",
        "id": "CVE-2012-5323",
        "trust": 2.7
      },
      {
        "db": "BID",
        "id": "52098",
        "trust": 2.5
      },
      {
        "db": "SECUNIA",
        "id": "48050",
        "trust": 1.7
      },
      {
        "db": "PACKETSTORM",
        "id": "109987",
        "trust": 1.7
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2012-004829",
        "trust": 0.8
      },
      {
        "db": "CNVD",
        "id": "CNVD-2012-0821",
        "trust": 0.6
      },
      {
        "db": "XF",
        "id": "73354",
        "trust": 0.6
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201210-088",
        "trust": 0.6
      },
      {
        "db": "PACKETSTORM",
        "id": "110506",
        "trust": 0.1
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2012-0821"
      },
      {
        "db": "BID",
        "id": "52098"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2012-004829"
      },
      {
        "db": "PACKETSTORM",
        "id": "110506"
      },
      {
        "db": "PACKETSTORM",
        "id": "109987"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201210-088"
      },
      {
        "db": "NVD",
        "id": "CVE-2012-5323"
      }
    ]
  },
  "id": "VAR-201210-0417",
  "iot": {
    "_id": null,
    "data": true,
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2012-0821"
      }
    ],
    "trust": 1.35
  },
  "iot_taxonomy": {
    "_id": null,
    "data": [
      {
        "category": [
          "Network device"
        ],
        "sub_category": null,
        "trust": 0.6
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2012-0821"
      }
    ]
  },
  "last_update_date": "2025-04-11T21:57:37.459000Z",
  "patch": {
    "_id": null,
    "data": [
      {
        "title": "X7968",
        "trust": 0.8,
        "url": "http://www.xavi.com.tw/Product.aspx?PLT=ADSL\u0026PCT=ADSL2%2B++++Wireless+CPE\u0026PCV=4\u0026M=X7968"
      }
    ],
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2012-004829"
      }
    ]
  },
  "problemtype_data": {
    "_id": null,
    "data": [
      {
        "problemtype": "CWE-352",
        "trust": 1.8
      }
    ],
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2012-004829"
      },
      {
        "db": "NVD",
        "id": "CVE-2012-5323"
      }
    ]
  },
  "references": {
    "_id": null,
    "data": [
      {
        "trust": 1.6,
        "url": "http://www.securityfocus.com/bid/52098"
      },
      {
        "trust": 1.6,
        "url": "http://secunia.com/advisories/48050"
      },
      {
        "trust": 1.6,
        "url": "http://packetstormsecurity.org/files/109987/xavi-7968-adsl-router-cross-site-request-forgery-cross-site-scripting.html"
      },
      {
        "trust": 1.0,
        "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/73354"
      },
      {
        "trust": 0.8,
        "url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2012-5323"
      },
      {
        "trust": 0.8,
        "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2012-5323"
      },
      {
        "trust": 0.6,
        "url": "http://www.securityfocus.com/bid/52098/"
      },
      {
        "trust": 0.6,
        "url": "http://xforce.iss.net/xforce/xfdb/73354"
      },
      {
        "trust": 0.3,
        "url": "http://www.xavi.com.tw/"
      },
      {
        "trust": 0.1,
        "url": "http://secunia.com/advisories/48050/#comments"
      },
      {
        "trust": 0.1,
        "url": "http://secunia.com/psi_30_beta_launch"
      },
      {
        "trust": 0.1,
        "url": "http://secunia.com/vulnerability_intelligence/"
      },
      {
        "trust": 0.1,
        "url": "http://secunia.com/advisories/48050/"
      },
      {
        "trust": 0.1,
        "url": "http://secunia.com/vulnerability_scanning/corporate/wsus_sccm_3rd_third_party_patching/"
      },
      {
        "trust": 0.1,
        "url": "http://secunia.com/advisories/secunia_security_advisories/"
      },
      {
        "trust": 0.1,
        "url": "http://secunia.com/vulnerability_scanning/personal/"
      },
      {
        "trust": 0.1,
        "url": "https://ca.secunia.com/?page=viewadvisory\u0026vuln_id=48050"
      },
      {
        "trust": 0.1,
        "url": "http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org"
      },
      {
        "trust": 0.1,
        "url": "http://secunia.com/advisories/about_secunia_advisories/"
      },
      {
        "trust": 0.1,
        "url": "http://192.168.1.1/webconfig/wan/confirm.html/confirm?context=pageaction%3dadd%26pvcname%3d%2522%253e%253c%252ftd%253e%253cscript%253ealert%28document.cookie%29%253c%252fscript%253e%26vpi%3d0%26vci%3d38%26scat%3dubr%26accessmode%3dpppoe%26encap%3dvcmux%26encapmode%3dbridged%26iptype%3ddhcp%26nat_enable%3dfalse%26def_route_enable%3dfalse%26qos_enable%3dfalse%26chkpppoeac%3dfalse%26tboxpppoeac%3dnot%2520configured%26sessiontype%3dalways_on%26username%3da%26password%3dss\u0026confirm=+apply+"
      },
      {
        "trust": 0.1,
        "url": "http://192.168.1.1/webconfig/lan/lan_config.html/local_lan_config?ip_add_txtbox=192.168.1.1\u0026sub_mask_txtbox=255.255.255.0\u0026host_name_txtbox=hack\u003cscript\u003ealert(document.cookie)\u003c/script\u003e\u0026domain_name_txtbox=local.lan\u0026mtu_txtbox=1500\u0026next=apply"
      },
      {
        "trust": 0.1,
        "url": "http://192.168.1.1/webconfig/upgrade_image/image_upgrade.html"
      },
      {
        "trust": 0.1,
        "url": "http://192.168.1.2/webconfig/admin_passwd/passwd.html/admin_passwd?sysusername=1234\u0026syspassword=12345\u0026syscfmpwd=12345\u0026cmdsubmit=apply"
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2012-0821"
      },
      {
        "db": "BID",
        "id": "52098"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2012-004829"
      },
      {
        "db": "PACKETSTORM",
        "id": "110506"
      },
      {
        "db": "PACKETSTORM",
        "id": "109987"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201210-088"
      },
      {
        "db": "NVD",
        "id": "CVE-2012-5323"
      }
    ]
  },
  "sources": {
    "_id": null,
    "data": [
      {
        "db": "CNVD",
        "id": "CNVD-2012-0821",
        "ident": null
      },
      {
        "db": "BID",
        "id": "52098",
        "ident": null
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2012-004829",
        "ident": null
      },
      {
        "db": "PACKETSTORM",
        "id": "110506",
        "ident": null
      },
      {
        "db": "PACKETSTORM",
        "id": "109987",
        "ident": null
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201210-088",
        "ident": null
      },
      {
        "db": "NVD",
        "id": "CVE-2012-5323",
        "ident": null
      }
    ]
  },
  "sources_release_date": {
    "_id": null,
    "data": [
      {
        "date": "2012-02-23T00:00:00",
        "db": "CNVD",
        "id": "CNVD-2012-0821",
        "ident": null
      },
      {
        "date": "2012-02-21T00:00:00",
        "db": "BID",
        "id": "52098",
        "ident": null
      },
      {
        "date": "2012-10-11T00:00:00",
        "db": "JVNDB",
        "id": "JVNDB-2012-004829",
        "ident": null
      },
      {
        "date": "2012-03-07T08:38:58",
        "db": "PACKETSTORM",
        "id": "110506",
        "ident": null
      },
      {
        "date": "2012-02-21T03:33:43",
        "db": "PACKETSTORM",
        "id": "109987",
        "ident": null
      },
      {
        "date": "2012-10-12T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-201210-088",
        "ident": null
      },
      {
        "date": "2012-10-08T18:55:01.467000",
        "db": "NVD",
        "id": "CVE-2012-5323",
        "ident": null
      }
    ]
  },
  "sources_update_date": {
    "_id": null,
    "data": [
      {
        "date": "2012-02-23T00:00:00",
        "db": "CNVD",
        "id": "CNVD-2012-0821",
        "ident": null
      },
      {
        "date": "2012-10-10T18:20:00",
        "db": "BID",
        "id": "52098",
        "ident": null
      },
      {
        "date": "2012-10-11T00:00:00",
        "db": "JVNDB",
        "id": "JVNDB-2012-004829",
        "ident": null
      },
      {
        "date": "2012-10-12T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-201210-088",
        "ident": null
      },
      {
        "date": "2025-04-11T00:51:21.963000",
        "db": "NVD",
        "id": "CVE-2012-5323",
        "ident": null
      }
    ]
  },
  "threat_type": {
    "_id": null,
    "data": "remote",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-201210-088"
      }
    ],
    "trust": 0.6
  },
  "title": {
    "_id": null,
    "data": "Xavi X7968 Vulnerable to cross-site request forgery",
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2012-004829"
      }
    ],
    "trust": 0.8
  },
  "type": {
    "_id": null,
    "data": "cross-site request forgery",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-201210-088"
      }
    ],
    "trust": 0.6
  }
}

VAR-201210-0416

Vulnerability from variot - Updated: 2025-04-11 21:11

Multiple cross-site scripting (XSS) vulnerabilities in Xavi X7968 allow remote attackers to inject arbitrary web script or HTML via the (1) pvcName parameter to webconfig/wan/confirm.html/confirm or (2) host_name_txtbox parameter to webconfig/lan/lan_config.html/local_lan_config. (1) webconfig/wan/confirm.html/confirm of pvcName Parameters (2) webconfig/lan/lan_config.html/local_lan_config of host_name_txtbox Parameters. The Xavi 7968 ADSL Router is an ADSL router device. There is a vulnerability in the Xavi 7968 ADSL Router. Because the program fails to properly validate user-submitted requests, an attacker can build a malicious URI, trick the user into parsing, and run privileged commands on the device, such as changing the configuration, performing a denial of service attack, or injecting arbitrary script code. Xavi 7968 ADSL Router is prone to cross-site scripting, HTML-injection and cross-site request forgery vulnerabilities. The attacker can exploit the issues to execute arbitrary script code in the context of the vulnerable site, potentially allowing the attacker to steal cookie-based authentication credentials, or perform certain administrative functions on victim's behalf. Other attacks are also possible. ----------------------------------------------------------------------