Skip to main content
← All vulnerabilities
CVE-2008-7165

Cross-site request forgery in cp06_wifi_m_nocifr.cgi in the administrator panel in TELECOM ITALIA Alice Gate2 Plus Wi-Fi allows remote attac

Published
Last modified
published
Not listed in CISA KEV
1 on Exploit-DB

Summary

Cross-site request forgery in cp06_wifi_m_nocifr.cgi in the administrator panel in TELECOM ITALIA Alice Gate2 Plus Wi-Fi allows remote attackers to hijack the authentication of administrators for requests that disable Wi-Fi encryption via certain values for the wlChannel and wlRadioEnable parameters.

Timeline

  1. Public exploit on Exploit-DB

    EDB-31043

  2. CVE published
  3. Record last updated

Affected versions

  • n/a n/a

    Version range not reported

References 6

osvdb.org

securityfocus.com

exchange.xforce.ibmcloud.com

secunia.com

Exploit-DB