2 matches found
CVE-2012-5319
The CVE-2012-5319 entry describes a CSRF vulnerability in the D-Link devices DCS-900, DCS-2000, and DCS-5300, specifically affecting the setup/security.cgi path. The underlying issue allows an attacker to hijack an administrator’s session and submit requests that change the administrator password...
D-Link DCS - 'security.cgi' Cross-Site Request Forgery
source: https://www.securityfocus.com/bid/52134/info The D-Link DCS-900, DCS-2000, and DCS-5300 are prone to a cross-site request-forgery vulnerability. Successful exploits may allow attackers to run privileged commands on the affected device, change configuration, cause denial-of-service...