Cisco DPC2420 Cross Site Scripting / File Disclosure