D-Link 600M Change Wireless Password CSRF

D-Link 600M router - Change wireless password via CSRF POST from kittysploit import from lib.protocols.http.csrf import Csrf class ModuleBrowserAuxiliary, Csrf: info = "name": "D-Link 600M Change Wireless Password CSRF", "description": "D-Link 600M router - Change wireless password via CSRF POST"...

CVE-2022-37123

D-link DIR-816 A2v1.10CNB04.img is vulnerable to Command injection via /goform/form2userconfig.cgi...

CVE-2022-37123

D-link DIR-816 A2v1.10CNB04.img is vulnerable to Command injection via /goform/form2userconfig.cgi...

Command injection

D-link DIR-816 A2v1.10CNB04.img is vulnerable to Command injection via /goform/form2userconfig.cgi...

CVE-2022-37123

D-link DIR-816 A2v1.10CNB04.img is vulnerable to Command injection via /goform/form2userconfig.cgi...

CVE-2022-37123: Improper Neutralization of Special Elements used in an OS Command

D-link DIR-816 A2v1.10CNB04.img is vulnerable to Command injection via /goform/form2userconfig.cgi...

CVE-2021-39510

An issue was discovered in D-Link DIR816A1FW101CNB04 750m11ac wireless router, The HTTP request parameter is used in the handler function of /goform/form2userconfig.cgi route, which can construct the user name string to delete the user function. This can lead to command injection through shell...

CVE-2021-39510: Improper Neutralization of Special Elements used in a Command

An issue was discovered in D-Link DIR816A1FW101CNB04 750m11ac wireless router, The HTTP request parameter is used in the handler function of /goform/form2userconfig.cgi route, which can construct the user name string to delete the user function. This can lead to command injection through shell...

PT-2021-22599

Name of the Vulnerable Software and Affected Versions: D-Link DIR-816 version DIR-816A2 FWv1.10CNB05 R1B011D88210 Description: An issue was discovered where the HTTP request parameter is used in the handler function of the "/goform/form2userconfig.cgi" route. This allows constructing the user nam...

D-Link DIR-816 A2 security vulnerability

The D-Link DIR-816 A2 is a wireless router from Taiwan, China-based AUO D-Link. A security vulnerability exists in the D-Link DIR-816A2, which stems from an issue discovered via the HTTP request parameter in the handler function of the goform form2userconfig.cgi route, where a username string can...

PT-2021-22600

Name of the Vulnerable Software and Affected Versions: D-Link DIR816 A1 FW101CNB04 Description: An issue was discovered in the D-Link DIR816 A1 FW101CNB04 750m11ac wireless router. The HTTP request parameter is used in the handler function of "/goform/form2userconfig.cgi" route, which can constru...

CVE-2021-39509: Improper Neutralization of Special Elements used in a Command

An issue was discovered in D-Link DIR-816 DIR-816A2FWv1.10CNB05R1B011D88210 The HTTP request parameter is used in the handler function of /goform/form2userconfig.cgi route, which can construct the user name string to delete the user function. This can lead to command injection through shell...

D-Link DIR816 command injection vulnerability

D-Link DIR-816 is a wireless router from D-Link Taiwan, China.A security vulnerability exists in D-Link DIR-816A1FW101CNB04 750m11ac. The vulnerability is caused by a flaw in the handler function of the /goform/form2userconfig.cgi route. Through the use of HTTP request parameters, an attacker cou...

CVE-2019-20073

On Netis DL4323 devices, XSS exists via the form2userconfig.cgi username parameter User Account Configuration...

CVE-2019-20073

CVE-2019-20073 affects Netis DL4323 devices and is described as a Cross-Site Scripting (XSS) vulnerability via the form2userconfig.cgi username parameter in User Account Configuration. The root cause cited is lack of proper validation of client data by the WEB application. The connected records c...

CVE-2019-20073

On Netis DL4323 devices, XSS exists via the form2userconfig.cgi username parameter User Account Configuration...

CVE-2019-20073: Improper Neutralization of Input During Web Page Generation

On Netis DL4323 devices, XSS exists via the form2userconfig.cgi username parameter User Account Configuration...

PT-2019-16078

Name of the Vulnerable Software and Affected Versions Netis DL4323 affected versions not specified Description A security issue exists due to the presence of a cross-site scripting XSS flaw. This issue is triggered via the username parameter in the "form2userconfig.cgi" endpoint, specifically...

CVE-2019-10041: Missing Authentication for Critical Function

The D-Link DIR-816 A2 1.11 router only checks the random token when authorizing a goform request. An attacker can get this token from dirlogin.asp and use an API URL /goform/form2userconfig.cgi to edit the system account without authentication...

PT-2019-11393

Name of the Vulnerable Software and Affected Versions: D-Link DIR-816 A2 version 1.11 Description: The issue allows an attacker to edit the system account without authentication by exploiting the fact that the router only checks the random token when authorizing a goform request. The token can be...