Lucene search
PRIOn knowledge basePRION:CVE-2015-5999HistoryNov 18, 2015 - 4:59 p.m.
Cross site request forgery (csrf)
2015-11-1816:59:00
PRIOn knowledge base
www.prio-n.com
2
Multiple cross-site request forgery (CSRF) vulnerabilities in the D-Link DIR-816L Wireless Router with firmware before 2.06.B09_BETA allow remote attackers to hijack the authentication of administrators for requests that (1) change the admin password, (2) change the network policy, or (3) possibly have other unspecified impact via crafted requests to hedwig.cgi and pigwidgeon.cgi.
| CPE | Name | Operator | Version |
|---|---|---|---|
| dir-816l_firmware | eq | <= 2.5.b2 |
References
ftp://ftp2.dlink.com/SECURITY_ADVISEMENTS/DIR-816L/DIR-816L_REVB_FIRMWARE_PATCH_NOTES_2.06.B09_BETA_EN.PDF
packetstormsecurity.com/files/134379/D-Link-DIR-816L-Cross-Site-Request-Forgery.html
seclists.org/fulldisclosure/2015/Nov/45
www.securityfocus.com/archive/1/536886/100/0/threaded
www.securityfocus.com/bid/77588
www.exploit-db.com/exploits/38707/
Related
cve
cve
CVE-2015-5999
2015-11-18 16:59:02
zdt
zdt
D-Link DIR-816L Cross Site Request Forgery Vulnerability
2015-11-16 00:00:00
seebug
seebug
exploitpack
exploitpack
D-Link DIR-816L Wireless Router - Cross-Site Request Forgery
2015-11-16 00:00:00
packetstorm
packetstorm
D-Link DIR-816L Cross Site Request Forgery
2015-11-16 00:00:00
cvelist
cvelist
CVE-2015-5999
2015-11-18 16:00:00
nvd
nvd
CVE-2015-5999
2015-11-18 16:59:02
exploitdb
exploitdb
D-Link DIR-816L Wireless Router - Cross-Site Request Forgery
2015-11-16 00:00:00