D-Link DCS-5300 CSRF

D-Link DCS-5300 camera - Change root password via CSRF POST from kittysploit import from lib.protocols.http.csrf import Csrf class ModuleBrowserAuxiliary, Csrf: info = "name": "D-Link DCS-5300 CSRF", "description": "D-Link DCS-5300 camera - Change root password via CSRF POST", "author":...

D-Link DCS-900 CSRF

D-Link DCS-900 camera - Change root password via CSRF POST from kittysploit import from lib.protocols.http.csrf import Csrf class ModuleBrowserAuxiliary, Csrf: info = "name": "D-Link DCS-900 CSRF", "description": "D-Link DCS-900 camera - Change root password via CSRF POST", "author": "KittySploit...

D-Link DCS-2000 CSRF

D-Link DCS-2000 camera - Change root password via CSRF POST from kittysploit import from lib.protocols.http.csrf import Csrf class ModuleBrowserAuxiliary, Csrf: info = "name": "D-Link DCS-2000 CSRF", "description": "D-Link DCS-2000 camera - Change root password via CSRF POST", "author":...

CVE-2012-5319

The CVE-2012-5319 entry describes a CSRF vulnerability in the D-Link devices DCS-900, DCS-2000, and DCS-5300, specifically affecting the setup/security.cgi path. The underlying issue allows an attacker to hijack an administrator’s session and submit requests that change the administrator password...

PT-2012-5918

Name of the Vulnerable Software and Affected Versions D-Link DCS-900, DCS-2000, and DCS-5300 affected versions not specified Description A cross-site request forgery CSRF issue exists, allowing remote attackers to hijack administrator authentication for requests that change the administrator...

CVE-2012-5319: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in setup/security.cgi in D-Link DCS-900, DCS-2000, and DCS-5300 allows remote attackers to hijack the authentication of administrators for requests that change the administrator password via the rootpass parameter...

D-Link DCS - 'security.cgi' Cross-Site Request Forgery

source: https://www.securityfocus.com/bid/52134/info The D-Link DCS-900, DCS-2000, and DCS-5300 are prone to a cross-site request-forgery vulnerability. Successful exploits may allow attackers to run privileged commands on the affected device, change configuration, cause denial-of-service...