CVE:CVE-2008-1257
CNNVD:CNNVD-200803-135
ZyXEL P-660HW是合勤（ZyXEL）科技公司的一款高度集成路由器，与现有铜线上高速ADSL、ADSL2和ADSL2+接口兼容。
ZyXEL P-660HW串联路由器上的Forms/DiagGeneral_2中的跨站脚本漏洞，远程攻击者借助PingIPAddr参数，注入任意的Web脚本或HTML。
solution:Upgrade zyxel p-660hw to a higher version than _t1,_t1:v2,and avoid the version _t1,_t1:v2; Upgrade zyxel p-660hw_d1 to a higher version than -,v2,and avoid the version v2; Upgrade zyxel p-660hw_d3 to a higher version than -; Upgrade zyxel p-660hw_t3 to a higher version than -,v2,and avoid the version v2