CVE-2014-4645

Cross-site scripting XSS vulnerability in dhcpinfo.html in D-link DSL-2760U-E1 allows remote attackers to inject arbitrary web script or HTML via a hostname...

CVE-2014-4645

CVE-2014-4645 is an XSS vulnerability in the D-Link DSL-2760U-E1 where the affected file is the dhcpinfo.html. The root cause is unvalidated user input in the hostname that can be echoed in the web interface, enabling remote attackers to inject arbitrary script/HTML. The NVD entry documents a bro...