130 matches found
CVE-2017-6896
The CVE-2017-6896 entry concerns the DIGISOL DG-HR1400 wireless router. Affected component: the authentication/session handling for DG-HR1400 1.00.02. Root cause (as described): privilege escalation is achievable by modifying the Base64-encoded session cookie value, enabling an attacker to rise f...
DigiSol DG-HR1400 Wireless Router Cross-Site Request Forgery Vulnerability
The DigiSol DG-HR1400 Wireless Router is a wireless broadband home router. A cross-site request forgery vulnerability exists in the access portal of the DigiSol DG-HR1400 Wireless Router. This allows a remote attacker to construct a malicious URI, trick the user into resolving it, and perform...
DIGISOL DG-HR1400 Cross Site Request Forgery
html Digisol Router CSRF Exploit - Indrajith A.N history.pushState'', '', '/' input type="submit...
CVE-2017-6127
Multiple cross-site request forgery CSRF vulnerabilities in the access portal on the DIGISOL DG-HR1400 Wireless Router with firmware 1.00.02 allow remote attackers to hijack the authentication of administrators for requests that 1 change the SSID, 2 change the Wi-Fi password, or 3 possibly have...
CVE-2017-6127
Multiple cross-site request forgery CSRF vulnerabilities in the access portal on the DIGISOL DG-HR1400 Wireless Router with firmware 1.00.02 allow remote attackers to hijack the authentication of administrators for requests that 1 change the SSID, 2 change the Wi-Fi password, or 3 possibly have...
Cross site request forgery (csrf)
Multiple cross-site request forgery CSRF vulnerabilities in the access portal on the DIGISOL DG-HR1400 Wireless Router with firmware 1.00.02 allow remote attackers to hijack the authentication of administrators for requests that 1 change the SSID, 2 change the Wi-Fi password, or 3 possibly have...
CVE-2017-6127
Multiple cross-site request forgery CSRF vulnerabilities in the access portal on the DIGISOL DG-HR1400 Wireless Router with firmware 1.00.02 allow remote attackers to hijack the authentication of administrators for requests that 1 change the SSID, 2 change the Wi-Fi password, or 3 possibly have...
CVE-2017-6127
The CVE-2017-6127 issue affects the DigiSol DG-HR1400 Wireless Router (firmware 1.00.02) and is a CSRF vulnerability in the access portal. Exposed via crafted requests to form2WlanBasicSetup.cgi, it allows an attacker to hijack administrator authentication to perform actions such as changing the ...
DIGISOL DG-HR1400 Wireless Router - Cross-Site Request Forgery
DIGISOL DG-HR1400 Wireless Router - Cross-Site Request Forgery Digisol Router CSRF Exploit - Indrajith A.N history.pushState'', '', '/' input type="hidden" name="basicrates" value...