CVE-2014-3761 in DAP-1150
Summary
cross-site scripting (xss) vulnerability in d-link dap 1150 with firmware 1.2.94 allows remote attackers to inject arbitrary web script or html via the res_buf parameter to index.cgi in the control/url-filter section.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.
Reservation
05/16/2014
Disclosure
05/16/2014
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 13607 | D-Link DAP-1150 index.cgi cross site scripting | 79 | Proof-of-Concept | Unavailable | CVE-2014-3761 |