CVE-2008-1250 | BDVDB-2026-29634 Detail

Description#

Multiple cross-site request forgery (CSRF) vulnerabilities in the web interface on the central phone server for the Snom 320 SIP Phone allow remote attackers to perform actions as the phone user, as demonstrated by inserting an address-book entry containing an XSS sequence.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.securityfocus.com/archive/1/489009/100/0/threaded
http://secunia.com/advisories/28938
http://www.gnucitizen.org/projects/router-hacking-challenge/
http://www.securityfocus.com/bid/27767
https://exchange.xforce.ibmcloud.com/vulnerabilities/40500

Exploit#

No public exploit known

History#

Version 12008-03-10Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.