| Title | D-Link DCS-6010L 1.15.03 Cross Site Scripting |
|---|
| Description | The Cross-Site Scripting (XSS) vulnerability was identified in the management application of the D-Link DCS-6010L router. To exploit this vulnerability, it is necessary to access the "/vb.htm?paratest" and modify the "paratest" field. The affected field is "paratest", where it is possible to inject a malicious Cross-Site Scripting (XSS) script.
script: <script>alert(1)</script> |
|---|
| Source | ⚠️ http://x.x.x.x:8080/vb.htm?paratest=profile1 |
|---|
| User | Fergod (UID 55882) |
|---|
| Submission | 07/22/2025 05:51 (1 Year ago) |
|---|
| Moderation | 07/25/2025 08:43 (3 days later) |
|---|
| Status | Accepted |
|---|
| VulDB entry | 317569 [D-Link DCS-6010L 1.15.03 Management Application /vb.htm paratest cross site scripting] |
|---|
| Points | 17 |
|---|