Cross site scripting

2014-05-1614:55:00

PRIOn knowledge base

www.prio-n.com

6.2 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

59.8%

JSON

Cross-site scripting (XSS) vulnerability in D-Link DAP 1150 with firmware 1.2.94 allows remote attackers to inject arbitrary web script or HTML via the res_buf parameter to index.cgi in the Control/URL-filter section.

CPENameOperatorVersion
dap_1150_firmwareeq1.2.94

CPE	Name	Operator	Version
	dap_1150_firmware	eq	1.2.94

References

seclists.org/fulldisclosure/2014/Apr/246

websecurity.com.ua/7112