CVE-2010-0936

CVE-2010-0936 is a cross-site scripting (XSS) vulnerability in the D-LINK DKVM-IP8 (firmware 2282_dlinkA4_p8_20071213) where an attacker can inject arbitrary script via the nickname parameter in auth.asp. Affected component: web authentication page; impact is XSS with none/partial confidentiality...