SQL Injection Vulnerability in hid_id and oldpwd Parameters of Multiple Series of D-Link Behavioral Gateways

D-Link DAR-8000-X series and DAR-7000-x series Internet Access Behavior Audit Gateways provide Internet access behavior management solutions. A SQL injection vulnerability exists in several series of D-Link behavior gateways. The file in question is autheditepwd.php, and the injection parameters...

PT-2014-5959

Name of the Vulnerable Software and Affected Versions GEO Redirector plugin versions 1.0.1 and earlier Description A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via the hid id parameter in the ajax functions.php file. Recommendations For versions 1.0....