CVE-2013-7054

D-Link DIR-100 4.03B07: cli.cgi XSS...

CVE-2013-7054

CVE-2013-7054 affects D-Link DIR-100 with firmware 4.03B07 in the cli.cgi component, enabling Cross-Site Scripting (XSS). Public details from multiple sources confirm the issue and indicate a vendor fix to 4.03B13; applying the patched firmware is recommended. CVSS vectors show network-remote acc...

CVE-2013-7053

D-Link DIR-100 4.03B07: cli.cgi CSRF...

CVE-2013-7053

CVE-2013-7053 concerns a CSRF vulnerability in the CLI CGI endpoint (cli.cgi) of the D-Link DIR-100 router with firmware 4.03B07. The intrinsic cause is cross-site request forgery to that endpoint, enabling an attacker to induce state-changing requests without user interaction. Public references ...

CVE-2013-7052

D-Link DIR-100 4.03B07: security bypass via an error in the cliget.cgi script...

CVE-2013-7052

CVE-2013-7052 affects D-Link DIR-100 with firmware 4.03B07, where an error in the cliget.cgi script enables a security bypass. The vulnerability is network-exposed, requires no authentication, and can grant elevated access due to improper validation. Red Hat/NVD/OpenVAS details align on the vulne...

CVE-2013-7051

CVE-2013-7051 affects D-Link DIR-100 with firmware 4.03B07. The issue is a security bypass in the cli.cgi module caused by failure to check authentication parameters, enabling unauthorized access through the CLI path. Public references describe multiple vulnerabilities for this device (CVE-2013-7...

CVE-2013-7051

D-Link DIR-100 4.03B07: cli.cgi security bypass due to failure to check authentication parameters...

PT-2020-7565 · D Link · D-Link Dir-100

Name of the Vulnerable Software and Affected Versions: D-Link DIR-100 version 4.03B07 Description: The issue is related to a security bypass due to an error in the cliget.cgi script. Recommendations: For D-Link DIR-100 version 4.03B07, consider restricting access to the cliget.cgi script as a...

PT-2020-7566 · D Link · D-Link Dir-100

Name of the Vulnerable Software and Affected Versions: D-Link DIR-100 version 4.03B07 Description: The issue concerns a CSRF vulnerability in the cli.cgi endpoint. Recommendations: For D-Link DIR-100 version 4.03B07, consider restricting access to the cli.cgi endpoint as a temporary workaround...

PT-2020-7567 · D Link · D-Link Dir-100

Name of the Vulnerable Software and Affected Versions: D-Link DIR-100 version 4.03B07 Description: The issue is related to an XSS vulnerability in the cli.cgi module. Recommendations: For D-Link DIR-100 version 4.03B07, update to a newer version that contains a fix for this issue...

PT-2020-7564 · D Link · D-Link Dir-100

Name of the Vulnerable Software and Affected Versions: D-Link DIR-100 version 4.03B07 Description: The issue is related to a security bypass in the cli.cgi module due to a failure to check authentication parameters. Recommendations: For D-Link DIR-100 version 4.03B07, consider restricting access ...

D-Link DIR-100 Cross-Site Request Forgery Vulnerability

The D-Link DIR-100 is a compact broadband router with integrated firewall functionality. A cross-site request forgery vulnerability exists in D-Link DIR-100 version 1.01. It allows remote attackers to construct malicious URIs, trick users into parsing them, and can perform malicious actions in th...

D-Link DIR-100 Brute Force / Cross Site Request Forgery

Hello list! There are Brute Force and Cross-Site Request Forgery vulnerabilities in D-Link DIR-100. ------------------------- Affected products: ------------------------- Vulnerable is the next model: D-Link DIR-100, Firmware v1.01. All other versions also must be vulnerable. ---------- Details:...

D-Link revA v1.13 路由器后门

下载了D-link无线路由器型号：DIR-100 revA的固件程序 v1.13。使用工具Binwalk，很快的就从中发现并提取出一个只读SquashFS文件系统，没用多大功夫我就将这个固件程序的web server/bin/webs加载到了IDA中： 基于上面的字符信息可以看出，这个/bin/webs二进制程序是一个修改版的thttpd，提供路由器管理员界面操作功能。看起来是经过了台湾明泰科技D-Link的一个子公司的修改。他们甚至很有心计的将他们很多自定义的函数名都辅以“alpha”前缀： 这个 alphaauthcheck 函数看起来很有意思！...

D-Link DIR-100 - Multiple Vulnerabilities

No description provided by source...

D-Link DIR-100 1.12 Security Bypass Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/31050/info D-Link DIR-100 is affected by a vulnerability that allows attackers to bypass security restrictions and access sites that are blocked by an administrator. D-Link DIR-100 devices with firmware 1.12 are vulnerabl...

D-Link DIR-100多个安全漏洞

BUGTRAQ ID: 65290 CVECAN ID: CVE-2013-7051,CVE-2013-7052,CVE-2013-7053,CVE-2013-7054,CVE-2013-7055 D-Link DIR-100是集成了防火墙功能的小型宽带路由器。 D-Link DIR-100以太网宽带路由器没有正确限制对管理员Web接口的访问权、对cliget.cgi脚本的访问权、也没有对HTTP请求进行有效性验证，在实现上存在多个安全漏洞，攻击者可利用这些漏洞非法访问受限制功能、获取管理员凭证或其他敏感设置、更改管理员密码等。 0 D-Link DIR-100 4.03B07 厂商补丁...

D-Link DIR-100 CSRF / XSS / Disclosure / Authentication

D-Link DIR-100 routers suffer from multiple authentication, credential management, cross site request forgery, cross site scripting, and information disclosure vulnerabilities. Title: Router D-Link DIR-100 Multiple Vulnerabilities Date: 2013-12-18 Author: Felix Richter Contact: email protected...

D-Link DIR-100 - Multiple Vulnerabilities

Title: Router D-Link DIR-100 Multiple Vulnerabilities Date: 2013-09-19 Author: Felix Richter Contact: [email protected] Vulnerable Software: ftp://ftp.dlink.de/dir/dir-100/driversoftware/DIR-100fwrevd403b07ALLde20120410.zip Patched Software:...