Vulnerabilities > CVE-2006-0946 - Unspecified vulnerability in Thomson Speedtouch
Attack vector
UNKNOWN Attack complexity
UNKNOWN Privileges required
UNKNOWN Confidentiality impact
UNKNOWN Integrity impact
UNKNOWN Availability impact
UNKNOWN thomson
exploit available
Summary
Cross-site scripting (XSS) vulnerability in Thomson SpeedTouch modems running firmware 5.3.2.6.0 allows remote attackers to inject arbitrary web script or HTML via the name parameter to the LocalNetwork page.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Hardware | 7 |
Exploit-Db
| description | Thomson SpeedTouch 500 Series LocalNetwork Page name Parameter XSS. CVE-2006-0946. Remote exploit for hardware platform |
| id | EDB-ID:27320 |
| last seen | 2016-02-03 |
| modified | 2006-02-25 |
| published | 2006-02-25 |
| reporter | Preben Nylokken |
| source | https://www.exploit-db.com/download/27320/ |
| title | Thomson SpeedTouch 500 Series LocalNetwork Page name Parameter XSS |
References
- http://secunia.com/advisories/19069
- http://secunia.com/advisories/19069
- http://securitytracker.com/id?1015688
- http://securitytracker.com/id?1015688
- http://www.osvdb.org/23527
- http://www.osvdb.org/23527
- http://www.securityfocus.com/archive/1/426186
- http://www.securityfocus.com/archive/1/426186
- http://www.securityfocus.com/bid/16839
- http://www.securityfocus.com/bid/16839
- http://www.vupen.com/english/advisories/2006/0765
- http://www.vupen.com/english/advisories/2006/0765
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24977
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24977