D-Link DAP 1150 Cross Site Request Forgery / Cross Site Scripting

Hello list! In 2011 and beginning of 2012 I wrote about multiple vulnerabilities http://securityvulns.ru/docs27440.html, http://securityvulns.ru/docs27677.html, http://securityvulns.ru/docs27676.html in D-Link DAP 1150 several dozens. That time I wrote about vulnerabilities in admin panel in Acce...

CVE-2013-7320

Cross-site request forgery CSRF vulnerability in D-Link DAP-2253 Access Point Rev. A1 with firmware before 1.30 allows remote attackers to hijack the authentication of administrators for requests that modify configuration settings via unspecified vectors...

CVE-2013-7321

Cross-site scripting XSS vulnerability in D-Link DAP-2253 Access Point Rev. A1 with firmware before 1.30 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in D-Link DAP-2253 Access Point Rev. A1 with firmware before 1.30 allows remote attackers to hijack the authentication of administrators for requests that modify configuration settings via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in D-Link DAP-2253 Access Point Rev. A1 with firmware before 1.30 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-7321

Cross-site scripting XSS vulnerability in D-Link DAP-2253 Access Point Rev. A1 with firmware before 1.30 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-7320

Cross-site request forgery CSRF vulnerability in D-Link DAP-2253 Access Point Rev. A1 with firmware before 1.30 allows remote attackers to hijack the authentication of administrators for requests that modify configuration settings via unspecified vectors...

CVE-2013-7320

CVE-2013-7320 describes a CSRF vulnerability in the D-Link DAP-2253 Access Point (Rev. A1) with firmware before 1.30. The issue allows remote attackers to hijack the administrator’s authenticated session and perform configuration changes via unspecified vectors. Affected product: DAP-2253 Access ...

CVE-2013-7321

The CVE-2013-7321 entry concerns a Cross-site Scripting (XSS) vulnerability in the D-Link DAP-2253 Access Point (Rev. A1) with firmware before 1.30. The flaw permits remote attackers to inject arbitrary web script or HTML via unspecified vectors. Affected component: web interface; root cause: imp...

PT-2014-3363

Name of the Vulnerable Software and Affected Versions D-Link DAP-2253 Access Point version prior to 1.30 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. This could potentially lead to unauthorized access or contr...

PT-2014-3362

Name of the Vulnerable Software and Affected Versions D-Link DAP-2253 Access Point version prior to 1.30 Description A cross-site request forgery issue allows remote attackers to hijack the authentication of administrators for requests that modify configuration settings. Recommendations For...

CVE-2013-7320: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in D-Link DAP-2253 Access Point Rev. A1 with firmware before 1.30 allows remote attackers to hijack the authentication of administrators for requests that modify configuration settings via unspecified vectors...

CVE-2013-7321: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in D-Link DAP-2253 Access Point Rev. A1 with firmware before 1.30 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

D-Link DAP-1522未文档化telnet账户漏洞

D-Link DAP-1522是一款路由器设备。 D-Link DAP-1522中的telnet服务使用一个内置的账户，允许远程攻击者可以利用该账户控制设备，如重置出厂设置。 0 D-Link DAP-1522 目前厂商暂无提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.dlink.com...

D-Link DAP-2553跨站脚本和请求伪造漏洞

D-Link DAP-2553是一款路由器设备。 D-Link DAP-2553不正确过滤用户提交的输入，允许攻击者利用漏洞进行跨站脚本和跨站请求伪造漏洞，可获取敏感信息或以目标用户上下文执行恶意操作。 0 D-Link DAP-2553 厂商补丁： D-Link ----- D-Link DAP-2553 1.30固件版本已经修复该漏洞，建议用户下载更新： http://www.dlink.com...

Exploit for D-Link DAP 1150

Hello! Here is exploit for D-Link DAP 1150. About vulnerabilities in it, which were used in this exploit, I've wrote in 2011. I've presented this exploit in my article "CSRF Attacks on Network Devices" in the magazine PenTest Extra 02/2012 http://pentestmag.com/pentestextra022012/, released in...

D-Link DAP 1150 Cross Site Request Forgery

Hello! Here is exploit for D-Link DAP 1150. About vulnerabilities in it, which were used in this exploit, I've wrote in 2011. I've presented this exploit in my article "CSRF Attacks on Network Devices" in the magazine PenTest Extra 02/2012 http://pentestmag.com/pentestextra022012/, released in...

AoF and CSRF vulnerabilities in D-Link DAP 1150

Hello 3APA3A! I want to warn you about new security vulnerabilities in D-Link DAP 1150 Wi-Fi Access Point and Router. These are Abuse of Functionality and Cross-Site Request Forgery vulnerabilities. This is my third advisory from series of advisories about vulnerabilities in D-Link products. Abus...

Multiple CSRF, DoS and XSS vulnerabilities in D-Link DAP 1150

Hello 3APA3A! I want to warn you about new security vulnerabilities in D-Link DAP 1150 Wi-Fi Access Point and Router. These are Cross-Site Request Forgery, Denial of Service and Cross-Site Scripting vulnerabilities. This is my fourth advisory from series of advisories about vulnerabilities in...

D-Link DAP-1150 1.2.94 - Cross-Site Request Forgery

D-Link DAP-1150 1.2.94 - Cross-Site Request Forgery source: https://www.securityfocus.com/bid/51985/info D-Link DAP-1150 is prone to a cross-site request-forgery vulnerability. Exploiting this issue may allow a remote attacker to perform certain administrative actions and gain unauthorized access...