CVE-2008-1250

Published: Mar 10, 2008Modified: Apr 23, 2026

9.3

Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 8.6 / Impact: 10.0

Source: NVD

Description

Multiple cross-site request forgery (CSRF) vulnerabilities in the web interface on the central phone server for the Snom 320 SIP Phone allow remote attackers to perform actions as the phone user, as demonstrated by inserting an address-book entry containing an XSS sequence.

Affected (1)

Products: Snom: 320 Sip Phone

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Snom 320 Sip Phone	All versions

Related CWEs

Cross-Site Request Forgery (CSRF)

The web application does not, or can not, sufficiently verify whether a well-formed, valid, consistent request was intentionally provided by the user who submitted the request.

References (10)

http://secunia.com/advisories/28938

Source: cve@mitre.org

http://www.gnucitizen.org/projects/router-hacking-challenge/

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/489009/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/27767

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/40500

Source: cve@mitre.org

http://secunia.com/advisories/28938

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.gnucitizen.org/projects/router-hacking-challenge/

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/489009/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/27767

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/40500

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.