CVE

Id
28179  
CVE No.
CVE-2007-4822  
Status
Candidate  
Description
Cross-site request forgery (CSRF) vulnerability in the device management interface in Buffalo AirStation WHR-G54S 1.20 allows remote attackers to make configuration changes as an administrator via HTTP requests to certain HTML pages in the res parameter with an inp req parameter to cgi-bin/cgi, as demonstrated by accessing (1) ap.html and (2) filter_ip.html.  
Phase
Assigned (20070911)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
292377 28179 CVE-2007-4822 BUGTRAQ:20070907 Buffalo AirStation WHR-G54S CSRF vulnerability  View
292378 28179 CVE-2007-4822 URL:http://www.securityfocus.com/archive/1/archive/1/478795/100/0/threaded  View
292379 28179 CVE-2007-4822 BUGTRAQ:20070907 Re: Buffalo AirStation WHR-G54S CSRF vulnerability  View
292380 28179 CVE-2007-4822 URL:http://www.securityfocus.com/archive/1/archive/1/478801/100/0/threaded  View
292381 28179 CVE-2007-4822 MISC:http://www.louhi.fi/advisory/buffalo_070907.txt  View
292382 28179 CVE-2007-4822 BID:25588  View
292383 28179 CVE-2007-4822 URL:http://www.securityfocus.com/bid/25588  View
292384 28179 CVE-2007-4822 OSVDB:37665  View
292385 28179 CVE-2007-4822 URL:http://osvdb.org/37665  View
292386 28179 CVE-2007-4822 SECUNIA:26712  View
292387 28179 CVE-2007-4822 URL:http://secunia.com/advisories/26712  View
292388 28179 CVE-2007-4822 SREASON:3117  View
292389 28179 CVE-2007-4822 URL:http://securityreason.com/securityalert/3117  View
292390 28179 CVE-2007-4822 XF:buffalo-aoss-management-csrf(36492)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
53931 JVNDB-2007-002623 Google Picasa における詳細不明な脆弱性 Google Picasa には、詳細不明な脆弱性が存在します。 CVE-2007-4824 28179 6.8 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-002623.html  View