338 matches found
CVE-2013-3089: Cross-Site Request Forgery (CSRF)
Cross-site request forgery CSRF vulnerability in apply.cgi in Belkin N300 F7D7301v1 router allows remote attackers to hijack the authentication of administrators for requests that modify configuration...
CVE-2013-3068: Cross-Site Request Forgery (CSRF)
Cross-site request forgery CSRF vulnerability in apply.cgi in Linksys WRT310Nv2 2.0.0.1 allows remote attackers to hijack the authentication of administrators for requests that change passwords and modify remote management ports...
Dell TrueMobile 2300 Remote Credential Reset Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/15770/info It is possible for remote attackers to gain control of a target TrueMobile 2300 running firmware versions 3.0.0.8 and 5.1.1.6. Other versions are likely affected. The vulnerability appears to be in an...
Linksys E1500/E2500 apply.cgi Remote Command Injection
No description provided by source...
Linksys WRT160N 'apply.cgi' Cross-Site Scripting Vulnerability
No description provided by source...
Cross site scripting
Cross-site scripting XSS vulnerability in AdvancedWirelessContent.asp in ASUS RT-AC68U and other RT series routers with firmware before 3.0.0.4.374.5047 allows remote attackers to inject arbitrary web script or HTML via the currentpage parameter to apply.cgi...
CVE-2014-2925: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in AdvancedWirelessContent.asp in ASUS RT-AC68U and other RT series routers with firmware before 3.0.0.4.374.5047 allows remote attackers to inject arbitrary web script or HTML via the currentpage parameter to apply.cgi...
D-Link DAP-1320 Directory Traversal / Cross Site Scripting Vulnerabilities
D-Link DAP-1320 wireless range extenders suffer from cross site scripting and directory traversal vulnerabilities. D-Link's DAP-1320 Wireless Range Extender suffers from both a directory traversal and a XSS vulnerability on all firmware versions. current v. 1.20B07...
Belkin Linksys WRT54GL apply.cgi Remote Command Execution
A remote command execution vulnerability has been reported in Belkin Linksys WRT54GL...
Cisco Linksys E1200 / N300 Cross Site Scripting
Summary -------------------- Software : Cisco/Linksys Router OS Hardware : E1200 N300 others currently untested Version : 2.0.04 others currently untested Website : http://www.linksys.com Issue : Reflected XSS Severity : Medium Researcher: Carl Benedict theinfinitenigma Product Description...
Cisco Linksys E1200 / N300 Cross Site Scripting Vulnerability
Cisco Linksys E1200 and N300 routers version 2.0.04 suffer from a cross site scripting vulnerability. Summary -------------------- Software : Cisco/Linksys Router OS Hardware : E1200 N300 others currently untested Version : 2.0.04 others currently untested Website : http://www.linksys.com Issue :...
Cisco Linksys E1200 / N300 Cross Site Scripting
Summary -------------------- Software : Cisco/Linksys Router OS Hardware : E1200 N300 others currently untested Version : 2.0.04 others currently untested Website : http://www.linksys.com Issue : Reflected XSS Severity : Medium Researcher: Carl Benedict theinfinitenigma Product Description...
Cisco Linksys E4200 - apply.cgi Multiple Cross-Site Scripting Vulnerabilities
Cisco Linksys E4200 - apply.cgi Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/59558/info The Cisco Linksys E1200 N300 router is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may...
Cisco Linksys E4200 - '/apply.cgi' Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/59558/info The Cisco Linksys E1200 N300 router is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an...
Cisco Linksys EA2700 Router - Multiple Vulnerabilities
source: https://www.securityfocus.com/bid/59054/info Cisco Linksys EA2700 routers is prone to the following security vulnerabilities: 1. A security-bypass vulnerability 2. A cross-site request-forgery vulnerability 3. A cross-site scripting vulnerability An attacker can exploit these issues to...
Linksys WRT54GL apply.cgi Command Execution
This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'Linksys WRT54GL apply.cgi Command...
Linksys WRT54GL apply.cgi Command Execution
Exploit for hardware platform in category remote exploits require 'msf/core' class Metasploit3 'Linksys WRT54GL apply.cgi Command Execution', 'Description' = %q Some Linksys Routers are vulnerable to an authenticated OS command injection in the Web Interface. Default credentials are admin/admin o...
Linksys E1500/E2500 - 'apply.cgi' Remote Command Injection (Metasploit)
This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'Linksys E1500/E2500 apply.cgi Remote...
Linksys WRT160nv2 apply.cgi Remote Command Injection
Some Linksys Routers are vulnerable to an authenticated OS command injection on their web interface where default credentials are admin/admin or admin/password. Since it is a blind OS command injection vulnerability, there is no output for the executed command when using the cmd generic payload...
CVE-2009-4821: Improper Authentication
The D-Link DIR-615 with firmware 3.10NA does not require administrative authentication for apply.cgi, which allows remote attackers to 1 change the admin password via the adminpassword parameter, 2 disable the security requirement for the Wi-Fi network via unspecified vectors, or 3 modify DNS...