| शीर्षक | D-Link DIR-816 1.01TO Cross Site Scripting |
|---|
| विवरण | In the 'cgi-bin/webproc' directory within the user account, there is an unrestricted stored Cross-Site Scripting (XSS) vulnerability and injection attacks on the 'SSID' parameter of the "D-Link DIR-816" system. This function executes the user parameter without restrictions. To view the script in action, simply access the 'Setup' directory.
Malicious attackers can exploit this vulnerability to obtain sensitive information from clients. |
|---|
| स्रोत | ⚠️ http://x.x.x.x:8080/cgi-bin/webproc?getpage=html/index.html&var:menu=24gwlan&var:page=24G_basic |
|---|
| उपयोगकर्ता | Fergod (UID 55882) |
|---|
| सबमिशन | 14/02/2025 06:00 PM (1 वर्ष पहले) |
|---|
| संयम | 17/02/2025 11:10 AM (3 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 296023 [D-Link DIR-816 1.01TO index.html&var:menu=24gwlan&var:page=24G_basic SSID क्रॉस साइट स्क्रिप्टिंग] |
|---|
| अंक | 20 |
|---|