CVE-2014-3761

Cross-site scripting XSS vulnerability in D-Link DAP 1150 with firmware 1.2.94 allows remote attackers to inject arbitrary web script or HTML via the resbuf parameter to index.cgi in the Control/URL-filter section...

CVE-2014-3761

The CVE-2014-3761 entry describes a Cross-site scripting (XSS) vulnerability in the D-Link DAP-1150, affected firmware 1.2.94. The issue is triggered by a crafted value in the res_buf parameter sent to index.cgi within the Control/URL-filter section, enabling remote attackers to inject arbitrary ...