CVE-2013-5223

Multiple cross-site scripting XSS vulnerabilities in D-Link DSL-2760U Gateway Rev. E1 allow remote authenticated users to inject arbitrary web script or HTML via the 1 ntpServer1 parameter to sntpcfg.cgi, username parameter to 2 ddnsmngr.cmd or 3 todmngr.tod, 4 TodUrlAdd parameter to urlfilter.cm...

CVE-2013-2271

The CVE identifies an authentication bypass in the D-Link DSL-2740B Gateway (firmware EU_1.0). An active administrator session can be exploited to bypass authentication and gain administrator access via a request to login.cgi, enabling full control over the device. Multiple sources (Red Hat, NVD,...

CVE-2013-5223

CVE-2013-5223 reports multiple cross-site scripting (XSS) vulnerabilities in the D-Link DSL-2760U Gateway (Rev. E1). The issue allows remote authenticated users to inject arbitrary web script or HTML via a long list of parameters (including ntpServer1, ddnsmngr.cmd username, todmngr.tod, urlfilte...

CVE-2013-5223

Multiple cross-site scripting XSS vulnerabilities in D-Link DSL-2760U Gateway Rev. E1 allow remote authenticated users to inject arbitrary web script or HTML via the 1 ntpServer1 parameter to sntpcfg.cgi, username parameter to 2 ddnsmngr.cmd or 3 todmngr.tod, 4 TodUrlAdd parameter to urlfilter.cm...

CVE-2013-2271

The D-Link DSL-2740B Gateway with firmware EU1.0, when an active administrator session exists, allows remote attackers to bypass authentication and gain administrator access via a request to login.cgi...

CVE-2013-5223: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in D-Link DSL-2760U Gateway Rev. E1 allow remote authenticated users to inject arbitrary web script or HTML via the 1 ntpServer1 parameter to sntpcfg.cgi, username parameter to 2 ddnsmngr.cmd or 3 todmngr.tod, 4 TodUrlAdd parameter to urlfilter.cm...

CVE-2013-2271: Undefined Security Weakness

The D-Link DSL-2740B Gateway with firmware EU1.0, when an active administrator session exists, allows remote attackers to bypass authentication and gain administrator access via a request to login.cgi...

PT-2013-3632

Name of the Vulnerable Software and Affected Versions D-Link DSL-2740B Gateway version EU 1.0 Description The issue allows remote attackers to bypass authentication and gain administrator access when an active administrator session exists. This can be achieved by sending a request to the...

PT-2013-5456

Name of the Vulnerable Software and Affected Versions D-Link DSL-2760U Gateway Rev. E1 Description Multiple cross-site scripting XSS vulnerabilities allow remote authenticated users to inject arbitrary web script or HTML via various parameters, including ntpServer1 to "sntpcfg.cgi", username to...

D-Link DSL-2740B - Multiple Cross-Site Request Forgery Vulnerabilities

D-Link DSL-2740B - Multiple Cross-Site Request Forgery Vulnerabilities +--------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : D-Link DSL-2740B ADSL Router CSRF Vulnerability Date : 09-08-2013 Author : Ivan...

D-Link DSL-2740B Cross Site Request Forgery

+--------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : D-Link DSL-2740B ADSL Router CSRF Vulnerability Date : 09-08-2013 Author : Ivano Binetti http://ivanobinetti.com Vendor site : http://www.d-link.com...

D-Link DSL-2740B - Multiple Cross-Site Request Forgery Vulnerabilities

+--------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : D-Link DSL-2740B ADSL Router CSRF Vulnerability Date : 09-08-2013 Author : Ivano Binetti http://ivanobinetti.com Vendor site : http://www.d-link.com...

PT-2013-5285

Name of the Vulnerable Software and Affected Versions ASUS RT-AC66U versions prior to 3.0.4.372 ASUS RT-N66U versions prior to 3.0.4.372 ASUS RT-N65U versions prior to 3.0.4.372 ASUS RT-N14U versions prior to 3.0.4.372 ASUS RT-N16 versions prior to 3.0.4.372 ASUS RT-N56U versions prior to 3.0.4.3...

CVE-2013-4937: Undefined Security Weakness

Multiple unspecified vulnerabilities in the AiCloud feature on the ASUS RT-AC66U, RT-N66U, RT-N65U, RT-N14U, RT-N16, RT-N56U, and DSL-N55U with firmware before 3.0.4.372 have unknown impact and attack vectors...

D-Link DSL 320B Password Extractor

This module exploits an authentication bypass vulnerability in D-Link DSL 320B 'D-Link DSL 320B Password Extractor', 'Description' = %q This module exploits an authentication bypass vulnerability in D-Link DSL 320B 'EDB', '25252' , 'OSVDB', '93013' , 'URL', 'http://www.s3cur1ty.de/m1adv2013-018' ...

D-Link DSL-320B Multiple Security Vulnerabilities (May 2013) - Active Check

D-Link DSL-320B devices are prone multiple security vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only nb: Running against all DS...

D-Link DSL-320B Authentication Bypass / Cross Site Scripting

Device: DSL-320B Firmware Version: EUDSL-320B v1.23 date: 28.12.2010 Vendor URL: http://www.dlink.com/de/de/home-solutions/connect/modems-and-gateways/dsl-320b-adsl-2-ethernet-modem ============ Vulnerability Overview: ============ Access to the Config file without authentication = full...

D-Link DSL-320B - Multiple Vulnerabilities

D-Link DSL-320B suffers from persistent cross site scripting and multiple authentication bypass bypass vulnerabilities. Device: DSL-320B Firmware Version: EUDSL-320B v1.23 date: 28.12.2010 Vendor URL:...

D-Link DSL-320B - Multiple Vulnerabilities

D-Link DSL-320B - Multiple Vulnerabilities Device: DSL-320B Firmware Version: EUDSL-320B v1.23 date: 28.12.2010 Vendor URL: http://www.dlink.com/de/de/home-solutions/connect/modems-and-gateways/dsl-320b-adsl-2-ethernet-modem ============ Vulnerability Overview: ============ Access to the Config...

Multiple Vulnerabilities in D-Link DSL-320B

Device: DSL-320B Firmware Version: EUDSL-320B v1.23 date: 28.12.2010 Vendor URL: http://www.dlink.com/de/de/home-solutions/connect/modems-and-gateways/dsl-320b-adsl-2-ethernet-modem ============ Vulnerability Overview: ============ Access to the Config file without authentication = full...