1735 matches found
Cross site request forgery (csrf)
Multiple cross-site request forgery CSRF vulnerabilities in D-Link DAP-1360 router with firmware 2.5.4 and earlier allow remote attackers to hijack the authentication of unspecified users for requests that 1 change the MAC filter restrict mode, 2 add a MAC address to the filter, or 3 remove a MAC...
Cross site scripting
Cross-site scripting XSS vulnerability in D-Link DAP-1360 router with firmware 2.5.4 and later allows remote attackers to inject arbitrary web script or HTML via the resbuf parameter to index.cgi when resconfigid is set to 41...
CVE-2014-10026
index.cgi in D-Link DAP-1360 with firmware 2.5.4 and earlier allows remote attackers to bypass authentication and obtain sensitive information by setting the clientlogin cookie to admin...
CVE-2014-10028
The CVE-2014-10028 affects D-Link DAP-1360 routers with firmware 2.5.4 and later. The vulnerability is a Cross-site scripting (XSS) flaw in the index.cgi endpoint, exploitable via the res_buf parameter when res_config_id equals 41, enabling remote attackers to inject arbitrary web scripts or HTML...
CVE-2014-10028
Cross-site scripting XSS vulnerability in D-Link DAP-1360 router with firmware 2.5.4 and later allows remote attackers to inject arbitrary web script or HTML via the resbuf parameter to index.cgi when resconfigid is set to 41...
CVE-2014-10025
Multiple cross-site request forgery CSRF vulnerabilities in D-Link DAP-1360 with firmware 2.5.4 and earlier allow remote attackers to hijack the authentication of unspecified users for requests that change the 1 Enable Wireless, 2 MBSSID, 3 BSSID, 4 Hide Access Point, 5 SSID, 6 Country, 7 Channel...
CVE-2014-10025
CVE-2014-10025 affects D-Link DAP-1360 (firmware 2.5.4 and earlier). A cross‑site request forgery (CSRF) allows an attacker to hijack the authentication of unspecified users to perform changes via a crafted request to index.cgi, including settings such as Enable Wireless, MBSSID, BSSID, Hide Acce...
CVE-2014-10027
Multiple cross-site request forgery CSRF vulnerabilities in D-Link DAP-1360 router with firmware 2.5.4 and earlier allow remote attackers to hijack the authentication of unspecified users for requests that 1 change the MAC filter restrict mode, 2 add a MAC address to the filter, or 3 remove a MAC...
CVE-2014-10026
The CVE-2014-10026 issue affects D-Link DAP-1360 devices running firmware 2.5.4 and earlier. The vulnerability arises in index.cgi where a remote attacker can bypass authentication by setting the client_login cookie to admin, allowing access to sensitive information. Impact is exposure of confide...
PT-2015-3670 · D Link · D-Link Dap-1360
Name of the Vulnerable Software and Affected Versions: D-Link DAP-1360 versions 2.5.4 and earlier Description: The issue allows remote attackers to bypass authentication and obtain sensitive information. This is achieved by setting the client login cookie to admin. Recommendations: For D-Link...
D-Link DAP-1360 multiple security vulnerabilities
Crossite request forgery, information leakage, crossite scripting in web interface...
CSRF and XSS vulnerabilities in D-Link DAP-1360
Hello 3APA3A! There are Cross-Site Request Forgery and Cross-Site Scripting vulnerabilities in D-Link DAP-1360 Wi-Fi Access Point and Router. In addition to previous Abuse of Functionality, Brute Force, Information Leakage, Cross-Site Request Forgery and Cross-Site Scripting vulnerabilities in...
CSRF and XSS vulnerabilities in D-Link DAP-1360
Hello 3APA3A! There are Cross-Site Request Forgery and Cross-Site Scripting vulnerabilities in D-Link DAP-1360 Wi-Fi Access Point and Router. ------------------------- Affected products: ------------------------- Vulnerable is the next model: D-Link DAP-1360, Firmware 1.0.0. This model with other...
D-Link DAP-1360 Cross Site Scripting / Cross Site Request Forgery
Hello list! There are Cross-Site Request Forgery and Cross-Site Scripting vulnerabilities in D-Link DAP-1360 Wi-Fi Access Point and Router. ------------------------- Affected products: ------------------------- Vulnerable is the next model: D-Link DAP-1360, Firmware 1.0.0. This model with other...
IL and CSRF vulnerabilities in D-Link DAP-1360
Hello 3APA3A! There are Information Leakage and Cross-Site Request Forgery vulnerabilities in D-Link DAP-1360 Wi-Fi Access Point and Router. ------------------------- Affected products: ------------------------- Vulnerable is the next model: D-Link DAP-1360, Firmware 1.0.0. This model with other...
Vulnerabilities in D-Link DAP-1360
Hello 3APA3A! There are Abuse of Functionality, Brute Force and Cross-Site Request Forgery vulnerabilities in D-Link DAP-1360 Wi-Fi Access Point and Router. ------------------------- Affected products: ------------------------- Vulnerable is the next model: D-Link DAP-1360, Firmware 1.0.0. This...
D-Link DAP-1360 Abuse / Cross Site Request Forgery
D-Link DAP-1360 suffers from cross site request forgery, abuse of functionality, and brute force vulnerabilities. There are Abuse of Functionality, Brute Force and Cross-Site Request Forgery vulnerabilities in D-Link DAP-1360 Wi-Fi Access Point and Router. ------------------------- Affected...
D-Link DAP-1360 Abuse / Cross Site Request Forgery
Hello list! There are Abuse of Functionality, Brute Force and Cross-Site Request Forgery vulnerabilities in D-Link DAP-1360 Wi-Fi Access Point and Router. ------------------------- Affected products: ------------------------- Vulnerable is the next model: D-Link DAP-1360, Firmware 1.0.0. This mod...
Multiple CSRF and XSS vulnerabilities in D-Link DAP 1150
Hello 3APA3A! In 2011 and beginning of 2012 I wrote about multiple vulnerabilities http://securityvulns.ru/docs27440.html, http://securityvulns.ru/docs27677.html, http://securityvulns.ru/docs27676.html in D-Link DAP 1150 several dozens. That time I wrote about vulnerabilities in admin panel in...