Cross-site scripting (XSS) vulnerability in sysconf.cgi in Motorola Wimax modem CPEi300 allows remote authenticated users to inject arbitrary web script or HTML via the page parameter.
https://www.exploit-db.com/exploits/7915
http://www.securityfocus.com/archive/1/500545/100/0/threaded