CVE-2013-2645

Multiple cross-site request forgery CSRF vulnerabilities on the TP-LINK WR1043N router with firmware TL-WR1043NDV1120405 allow remote attackers to hijack the authentication of administrators for requests that 1 enable FTP access aka "FTP directory traversal" to /tmp via the shareEntire parameter ...

CVE-2013-2645

CVE-2013-2645 affects the TP-LINK WR1043N router (firmware TL-WR1043ND_V1_120405). Multiple CSRF vulnerabilities allow remote attackers to hijack administrator authentication by crafting requests that alter FTP settings and bandwidth controls (e.g., shareEntire to enable FTP, nas_admin_pwd to cha...

CVE-2013-2645

Multiple cross-site request forgery CSRF vulnerabilities on the TP-LINK WR1043N router with firmware TL-WR1043NDV1120405 allow remote attackers to hijack the authentication of administrators for requests that 1 enable FTP access aka "FTP directory traversal" to /tmp via the shareEntire parameter ...

PT-2014-2609

Name of the Vulnerable Software and Affected Versions TP-LINK WR1043N router with firmware TL-WR1043ND V1 120405 Description The issue allows remote attackers to hijack the authentication of administrators for various requests. This includes enabling FTP access to /tmp via the shareEntire paramet...

CVE-2013-2645: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities on the TP-LINK WR1043N router with firmware TL-WR1043NDV1120405 allow remote attackers to hijack the authentication of administrators for requests that 1 enable FTP access aka "FTP directory traversal" to /tmp via the shareEntire parameter ...

TP-LINK WDR4300 Multiple Vulnerabilities

Binary data 8396.prm...

CVE-2014-4727

Cross-site scripting XSS vulnerability in the DHCP clients page in the TP-LINK N750 Wireless Dual Band Gigabit Router TL-WDR4300 with firmware before 140916 allows remote attackers to inject arbitrary web script or HTML via the hostname in a DHCP request...

CVE-2014-4728

The web server in the TP-LINK N750 Wireless Dual Band Gigabit Router TL-WDR4300 with firmware before 140916 allows remote attackers to cause a denial of service crash via a long header in a GET request...

Cross site request forgery (csrf)

The web server in the TP-LINK N750 Wireless Dual Band Gigabit Router TL-WDR4300 with firmware before 140916 allows remote attackers to cause a denial of service crash via a long header in a GET request...

Cross site scripting

Cross-site scripting XSS vulnerability in the DHCP clients page in the TP-LINK N750 Wireless Dual Band Gigabit Router TL-WDR4300 with firmware before 140916 allows remote attackers to inject arbitrary web script or HTML via the hostname in a DHCP request...

CVE-2014-4727

CVE-2014-4727 affects TP-LINK TL-WDR4300 (N750) routers. The vulnerability is a stored XSS in the DHCP clients page, exploitable via the hostname field in a DHCP request. If an administrator visits the affected web panel, injected script can execute in the browser. A DoS condition on the device w...

CVE-2014-4728

The web server in the TP-LINK N750 Wireless Dual Band Gigabit Router TL-WDR4300 with firmware before 140916 allows remote attackers to cause a denial of service crash via a long header in a GET request...

CVE-2014-4727

Cross-site scripting XSS vulnerability in the DHCP clients page in the TP-LINK N750 Wireless Dual Band Gigabit Router TL-WDR4300 with firmware before 140916 allows remote attackers to inject arbitrary web script or HTML via the hostname in a DHCP request...

CVE-2014-4728

The CVE-2014-4728 entry concerns the TP-LINK TL-WDR4300 N750 router. Affected component: the device web server. Root cause: handling of a long header in a GET request, enabling remote attackers to cause a denial of service (crash). Impact stated in sources: partial availability impact to the devi...

CVE-2012-6316

Multiple cross-site scripting XSS vulnerabilities in the TP-LINK TL-WR841N router with firmware 3.13.9 Build 120201 Rel.54965n and earlier allow remote administrators to inject arbitrary web script or HTML via the 1 username or 2 pwd parameter to userRpm/NoipDdnsRpm.htm...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the TP-LINK TL-WR841N router with firmware 3.13.9 Build 120201 Rel.54965n and earlier allow remote administrators to inject arbitrary web script or HTML via the 1 username or 2 pwd parameter to userRpm/NoipDdnsRpm.htm...

CVE-2012-6316

Multiple cross-site scripting XSS vulnerabilities in the TP-LINK TL-WR841N router with firmware 3.13.9 Build 120201 Rel.54965n and earlier allow remote administrators to inject arbitrary web script or HTML via the 1 username or 2 pwd parameter to userRpm/NoipDdnsRpm.htm...

CVE-2012-6316

CVE-2012-6316 affects the TP-LINK TL-WR841N router (firmware up to 3.13.9 Build 120201 Rel.54965n and earlier). The vulnerability is a Stored XSS in the web interface, exploitable by remote-authenticated administrators through the parameters (1) username or (2) pwd to the page userRpm/NoipDdnsRpm...

PT-2014-6080

Name of the Vulnerable Software and Affected Versions TP-LINK N750 Wireless Dual Band Gigabit Router TL-WDR4300 versions prior to 140916 Description The issue allows remote attackers to cause a denial of service, resulting in the router crashing, by sending a GET request with a long header...

PT-2014-2381

Name of the Vulnerable Software and Affected Versions TP-LINK TL-WR841N router versions 3.13.9 Build 120201 Rel.54965n and earlier Description The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote administrators to inject arbitrary web script or...