Entradas con la etiqueta ‘d-link’
D-Link DSL-G624T several vulnerabilities
20 de Octubre de 2006 | 
Autor: | Version: | Tested on D-Link DSL-G624T Version: Firmware Version : V3.00B01T01.YA-C.20060616 |
|---|---|
| Discovered by: | José Ramón Palanco: jose.palanco(at)eazel(dot).es |
| Description: | D-Link DSL-G624T ADSL Router is vulnerable to several securities.
Directory transversalhttp://router/cgi-bin/webcm?getpage=/./././././././etc/passwd http://router/cgi-bin/webcm?getpage=/./././././././etc/config.xml Cross Site ScriptingUrl:: http://router/cgi-bin/webcm Url:: http://router/cgi-bin/webcm Url:: http://router/cgi-bin/webcm Directory listingIs possible to list the /cgi-bin directory keywords: advisory005-D-Link-DSL-G624T-directoy-transversal-xss-cross-site-scripting-directory-listing-vulnerabilities.html |
Publicado en 
Etiquetas: 
D-Link DSA-3100 XSS
| Version: | Tested on D-Link DSA-3100 |
|---|---|
| Discovered by: | Discovered by: jaime.blasco(at)eazel(dot).es http://www.eazel.es |
| Description: | D-Link DSA-3100 Airspot Gateway is vulnerable to a security vulnerability that allow Cross-Site Scripting attacks. Due to improper filtering, a remote attacker can cause a cross site scripting in this script: http://accespoint/login_error.shtml?uname=%3CBODY%20ONLOAD=alert(‘www.eazel.es’)%3E keywords: advisory003-D-Link-DSA-3100-Cross-Site-Scripting.php |