CVE-2007-5384
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2007-5384
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Multiple cross-site request forgery (CSRF) vulnerabilities in the Thomson/Alcatel SpeedTouch 7G router, as used for the BT Home Hub 6.2.6.B and earlier, allow remote attackers to perform actions as administrators via unspecified POST requests, as demonstrated by enabling an inbound remote-assistance HTTPS session on TCP port 51003. NOTE: an authentication bypass can be leveraged to exploit this in the absence of an existing administrative session. NOTE: SpeedTouch 780 might also be affected by some of these issues.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
BT Home Hub和Thomson/Alcatel Speedtouch HTTPS会话劫持漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
BT Home Hub和Speedtouch 7G都是家用的无线Internet路由器。 BT Home Hub和SpeedTouch 7G路由器中存在多个安全漏洞，允许远程攻击者通过执行不明POST请求执行管理员操作，具体表现为劫持远程协助在TCP端口51003 HTTPS会话。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2007-5384
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2007-5384
Please Login to view more intelligence information
- http://www.theregister.co.uk/2007/10/09/bt_home_hub_vuln/x_refsource_MISC
- https://nvd.nist.gov/vuln/detail/CVE-2007-5384
Same Patch Batch · n/a · 2007-10-12 · 42 CVEs total
| CVE-2007-5425 | Interspire Interspire ActiveKB 'index.php' SQL代码注入漏洞 | |
| CVE-2007-5415 | Mozilla Firefox UTF-7文件gopher URI跨站脚本攻击漏洞 | |
| CVE-2007-5416 | Drupal rupal_eval函数数字值错误漏洞 | |
| CVE-2007-5417 | BoastMachine 'index.php' 目录遍历漏洞 | |
| CVE-2007-5418 | CARE2X 多个PHP远程文件包含漏洞 | |
| CVE-2007-5419 | 3Com OfficeConnect Wireless Cable/DSL Router 流量信息泄露漏洞 | |
| CVE-2007-5420 | 3Com OfficeConnect Wireless Cable/DSL Router 未授权远程管理和信息泄露漏洞 | |
| CVE-2007-5422 | Sun Solaris Basic Security Module 审计网络事件拒绝服务漏洞 | |
| CVE-2007-5358 | Digium Asterisk IMAP储存多个缓冲区溢出漏洞 | |
| CVE-2007-5423 | TikiWiki 'Tiki-Graph_Formula.PHP'代码注入漏洞 | |
| CVE-2007-5424 | PHP disable_functions特征安全绕过漏洞 | |
| CVE-2007-5414 | Mozilla Firefox UTF-7代码跨站脚本攻击漏洞 | |
| CVE-2007-5426 | Interspire ActiveKB NX URI的页参数多个跨站脚本攻击漏洞 | |
| CVE-2007-5427 | Joomla! com_search组件searchword参数跨站脚本攻击漏洞 | |
| CVE-2007-5428 | Umi-cms UMI CMS 'search_do/' 跨站脚本攻击漏洞 | |
| CVE-2007-5429 | Nucleus CMS 'index.php ' 跨站脚本攻击漏洞 | |
| CVE-2007-5430 | Scottmanktelow Stride 'main.php' SQL注入漏洞 | |
| CVE-2007-5431 | JavaAtWork MyFTPUploader Module 'imageupload.js' 信息泄露漏洞 | |
| CVE-2007-5432 | Scottmanktelow Stride 'login.php'信息泄露漏洞 | |
| CVE-2007-5433 | Siteup 'index.cgi' 跨站脚本攻击漏洞 |
Showing top 20 of 42 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same vendor: n/a
- CVE-2026-8224
Open5GS PCF context.c pcf_sess_set_ipv6prefix denial of serv - CVE-2026-8223
Open5GS sm-policies Endpoint pcf_sess_sbi_discover_and_send - CVE-2026-8222
Open5GS sm-policies Endpoint nbsf-handler.c pcf_nbsf_managem - CVE-2026-8196
JeecgBoot mLogin Endpoint LoginController.java authorization - CVE-2026-8195
JeecgBoot SVG File CommonController.java cross site scriptin
V. Comments for CVE-2007-5384
No comments yet