CVE-2014-9517

Cross-site scripting XSS vulnerability in D-link IP camera DCS-2103 with firmware before 1.20 allows remote attackers to inject arbitrary web script or HTML via the QUERYSTRING to vb.htm...

Cross site scripting

Cross-site scripting XSS vulnerability in D-link IP camera DCS-2103 with firmware before 1.20 allows remote attackers to inject arbitrary web script or HTML via the QUERYSTRING to vb.htm...

CVE-2014-9517

Cross-site scripting XSS vulnerability in D-link IP camera DCS-2103 with firmware before 1.20 allows remote attackers to inject arbitrary web script or HTML via the QUERYSTRING to vb.htm...

CVE-2014-9517

The CVE-2014-9517 entry concerns the D-Link DCS-2103 IP camera. A cross-site scripting (XSS) vulnerability exists in firmware versions prior to 1.20, allowing remote attackers to inject arbitrary web script or HTML via the QUERY_STRING to vb.htm. The issue is triggered in the vb.htm endpoint and ...

CVE-2014-9517: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in D-link IP camera DCS-2103 with firmware before 1.20 allows remote attackers to inject arbitrary web script or HTML via the QUERYSTRING to vb.htm...

BF and XSS vulnerabilities in D-Link DCS-2103

Hello 3APA3A! There are Brute Force and Cross-Site Scripting vulnerabilities in D-Link DCS-2103 IP camera. If previous Path Traversal and Full path disclosure vulnerabilities were post-auth, then these BF and XSS vulnerabilities are pre-auth. ------------------------- Affected products:...

Dlink IP Camera Luminance Information Disclosure - Ver2 (CVE-2013-1601)

An information disclosure vulnerability has been reported in Multiple D-Link IP Cameras. An attacker could exploit this vulnerability via direct requests for the md/lums.cgi. Successful exploitation of this vulnerability could allow a remote attacker to gain access to ASCII output of the live vid...

D-Link DCS-2103 Brute Force / Cross Site Scripting

Hello list! There are Brute Force and Cross-Site Scripting vulnerabilities in D-Link DCS-2103 IP camera. If previous Path Traversal and Full path disclosure vulnerabilities were post-auth, then these BF and XSS vulnerabilities are pre-auth. ------------------------- Affected products:...

D-Link DCS-2103 IP Camera Devices Multiple Vulnerabilities (Nov 2014) - Active Check

D-Link DCS-2103 IP camera devices are prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only nb: Running against al...

CVE-2014-9238

D-link IP camera DCS-2103 with firmware 1.0.0 allows remote attackers to obtain the installation path via the file parameter to cgi-bin/sddownload.cgi, as demonstrated by a / forward slash character...

CVE-2014-9234

Directory traversal vulnerability in cgi-bin/sddownload.cgi in D-link IP camera DCS-2103 with firmware 1.0.0 allows remote attackers to read arbitrary files via a .. dot dot in the file parameter...

Directory traversal

Directory traversal vulnerability in cgi-bin/sddownload.cgi in D-link IP camera DCS-2103 with firmware 1.0.0 allows remote attackers to read arbitrary files via a .. dot dot in the file parameter...

Design/Logic Flaw

D-link IP camera DCS-2103 with firmware 1.0.0 allows remote attackers to obtain the installation path via the file parameter to cgi-bin/sddownload.cgi, as demonstrated by a / forward slash character...

CVE-2014-9234

Directory traversal vulnerability in cgi-bin/sddownload.cgi in D-link IP camera DCS-2103 with firmware 1.0.0 allows remote attackers to read arbitrary files via a .. dot dot in the file parameter...

CVE-2014-9234

The vulnerability CVE-2014-9234 affects the D-Link DCS-2103 IP camera (firmware 1.0.0). The affected component is the web interface CGI script cgi-bin/sddownload.cgi, where a directory-traversal flaw (via .. in the file parameter) can allow remote attackers to read arbitrary files. This aligns wi...

CVE-2014-9238

The CVE-2014-9238 entry concerns the D-Link DCS-2103 IP camera with firmware 1.0.0. The issue is a remote path disclosure vulnerability: an attacker can obtain the installation path by supplying a file parameter to cgi-bin/sddownload.cgi, demonstrated by a forward slash character. This affects th...

CVE-2014-9238

D-link IP camera DCS-2103 with firmware 1.0.0 allows remote attackers to obtain the installation path via the file parameter to cgi-bin/sddownload.cgi, as demonstrated by a / forward slash character...

PT-2014-8889

Name of the Vulnerable Software and Affected Versions D-link IP camera DCS-2103 version 1.0.0 Description The issue allows remote attackers to read arbitrary files via a .. dot dot in the file parameter of the cgi-bin/sddownload.cgi endpoint. Recommendations For D-link IP camera DCS-2103 version...

PT-2014-8893

Name of the Vulnerable Software and Affected Versions D-link IP camera DCS-2103 version 1.0.0 Description The issue allows remote attackers to obtain the installation path. This can be achieved by exploiting the "file" parameter to the "cgi-bin/sddownload.cgi" API endpoint, for example, by using ...

CVE-2014-9234: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in cgi-bin/sddownload.cgi in D-link IP camera DCS-2103 with firmware 1.0.0 allows remote attackers to read arbitrary files via a .. dot dot in the file parameter...