INCA_IM-204Dsl.txt

======================================== INCA IM-204 Dsl several vulnerabilities ======================================== Found By CrackersChild [email protected] ========================================== Directory transversal...

CVE-2006-5536

Directory traversal vulnerability in cgi-bin/webcm in D-Link DSL-G624T firmware 3.00B01T01.YA-C.20060616 allows remote attackers to read arbitrary files via a .. dot dot in the getpage parameter...

CVE-2006-5537

Multiple cross-site scripting XSS vulnerabilities in cgi-bin/webcm in D-Link DSL-G624T firmware 3.00B01T01.YA-C.20060616 allow remote attackers to inject arbitrary web script or HTML via the 1 upnp:settings/state or 2 upnp:settings/connection parameters...

CVE-2006-5538

The CVE-2006-5538 issue affects D-Link DSL-G624T firmware 3.00B01T01.YA-C.20060616. It enables remote attackers to list the contents of the cgi-bin directory through unspecified vectors (likely a direct request), indicating an information disclosure risk. The specific exploit method, affected com...

CVE-2006-5536

CVE-2006-5536: A directory traversal vulnerability exists in the D-Link DSL-G624T firmware 3.00B01T01.YA-C.20060616, specifically in the cgi-bin/webcm script. Remote attackers can read arbitrary files by supplying a .. (dot dot) in the getpage parameter. This is documented across multiple sources...

CVE-2006-5537

Multiple cross-site scripting XSS vulnerabilities in cgi-bin/webcm in D-Link DSL-G624T firmware 3.00B01T01.YA-C.20060616 allow remote attackers to inject arbitrary web script or HTML via the 1 upnp:settings/state or 2 upnp:settings/connection parameters...

CVE-2006-5537

The CVE-2006-5537 issue affects D-Link DSL-G624T firmware (cgi-bin/webcm) version 3.00B01T01.YA-C.20060616. It describes multiple cross-site scripting (XSS) vulnerabilities that allow remote attackers to inject arbitrary web script or HTML via the upnp:settings/state or upnp:settings/connection p...

INCA IM-204 Dsl several vulnerabilities

======================================== INCA IM-204 Dsl several vulnerabilities ======================================== Found By CrackersChild crackerschild at sibersavascilar dot com email concealed ========================================== Directory transversal...

D-Link DSL-G624T several vulnerabilities

D-Link DSL-G624T ADSL Router is vulnerable to several securities. Directory transversal http://router/cgi-bin/webcm?getpage=/./././././././etc/passwd http://router/cgi-bin/webcm?getpage=/./././././././etc/config.xml Cross Site Scripting Url:: http://router/cgi-bin/webcm Method:: POST Variable::...

Multiple D-Link DSL-G624T ADSL Router security vulnjerabilities

Crossite scripting, dfirectory traversal and another Web-interface vulnerabilities...

CVE-2006-5538: Undefined Security Weakness

D-Link DSL-G624T firmware 3.00B01T01.YA-C.20060616 allows remote attackers to list contents of the cgi-bin directory via unspecified vectors, probably a direct request...

CVE-2006-5537: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in cgi-bin/webcm in D-Link DSL-G624T firmware 3.00B01T01.YA-C.20060616 allow remote attackers to inject arbitrary web script or HTML via the 1 upnp:settings/state or 2 upnp:settings/connection parameters...

CVE-2006-5536: Undefined Security Weakness

Directory traversal vulnerability in cgi-bin/webcm in D-Link DSL-G624T firmware 3.00B01T01.YA-C.20060616 allows remote attackers to read arbitrary files via a .. dot dot in the getpage parameter...

INCA IM-204 DSL router multilpe security vulnerabilities

Directory traversal, information leak...

D-Link DSL-G624T - Information Disclosure

D-Link DSL-G624T - Information Disclosure source: https://www.securityfocus.com/bid/20689/info D-Link DSL-G624T devices are prone to a remote information-disclosure vulnerability because the devices fail to properly sanitize user-supplied input. Exploiting this issue allows remote, unauthenticate...

D-Link DSL-G624T - Information Disclosure

source: https://www.securityfocus.com/bid/20689/info D-Link DSL-G624T devices are prone to a remote information-disclosure vulnerability because the devices fail to properly sanitize user-supplied input. Exploiting this issue allows remote, unauthenticated attackers to gain access to potentially...

CVE-2006-2337

Directory traversal vulnerability in webcm in the D-Link DSL-G604T Wireless ADSL Router Modem allows remote attackers to read arbitrary files via an absolute path in the getpage parameter...

CVE-2006-2337: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in webcm in the D-Link DSL-G604T Wireless ADSL Router Modem allows remote attackers to read arbitrary files via an absolute path in the getpage parameter...

CVE-2006-2337

CVE-2006-2337 describes a directory traversal vulnerability in the webcm component of the D-Link DSL-G604T Wireless ADSL Router Modem. The flaw allows an attacker to read arbitrary files by supplying an absolute path in the getpage parameter. The vulnerability affects the router’s web interface a...

Default credentials

NETGEAR WGT624 Wireless DSL router has a default account of superusername "Gearguy" and superpasswd "Geardog", which allows remote attackers to modify the configuration. NOTE: followup posts have suggested that this might not occur with all WGT624 routers...