CVE-2014-9517

The CVE-2014-9517 entry concerns the D-Link DCS-2103 IP camera. A cross-site scripting (XSS) vulnerability exists in firmware versions prior to 1.20, allowing remote attackers to inject arbitrary web script or HTML via the QUERY_STRING to vb.htm. The issue is triggered in the vb.htm endpoint and ...