CVE-2007-6702

Published: Mar 4, 2008Modified: Apr 23, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

goform/QuickStart_c0 on the GoAhead Web Server on the FS4104-AW (aka rooter) VDSL device contains a password in the typepassword field, which allows remote attackers to obtain this password by reading the HTML source, a different vulnerability than CVE-2002-1603.

Affected (2)

Products: Goahead Software: Fs4104 Aw Device, Goahead Webserver

Goahead Software

2 products

Fs4104 Aw Device

Goahead Webserver

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Goahead Software Fs4104 Aw Device	All versions
Goahead Software Goahead Webserver	All versions

Related CWEs

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (6)

http://osvdb.org/43168

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/39149

Source: cve@mitre.org

https://www.exploit-db.com/exploits/4744

Source: cve@mitre.org

http://osvdb.org/43168

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/39149

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.exploit-db.com/exploits/4744

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.