idappcom

Main Menu

What's new

What's New

Latest Traffic IQ Professional update contains 167 of the latest application exploits, associated data and high quality security rules.

Cyber Protection

Managed Service

Cyber Protection for the home, home office, traveller and small office. Not just a device, a managed service from leading experts. More info...

Threat Level

Threat Level

High (6.7/10)

IQID:8350 HTTP D-Link 2760N urlfilter.cmd TodUrlAdd Parameter Stored XSS Vulnerability S

IQID: 8350 - December 2013

Multiple successful remote cross-site scripting attacks against D-Link DSL-2760U Gateway (Rev. E1) via the (1) ntpServer1 parameter to sntpcfg.cgi, username parameter to (2) ddnsmngr.cmd or (3) todmngr.tod, (4) TodUrlAdd parameter to urlfilter.cmd, (5) appName parameter to scprttrg.cmd, (6) fltName in an add action or (7) rmLst parameter in a remove action to scoutflt.cmd, (8) groupName parameter to portmapcfg.cmd, (9) snmpRoCommunity parameter to snmpconfig.cgi, (10) fltName parameter to scinflt.cmd, (11) PolicyName in an add action or (12) rmLst parameter in a remove action to prmngr.cmd, (13) ippName parameter to ippcfg.cmd, (14) smbNetBiosName or (15) smbDirName parameter to samba.cgi, or (16) wlSsid parameter to wlcfg.wl.

A Full Description is available for this threat, please sign in for access to Full Description.

Attack Data

Attack Data is available for this threat, please sign in for access to Attack Data.

CVSS Information

CVSS Information is available for this threat, please sign in for access to CVSS Information.

Date

Date Information is available for this threat, please sign in for access to Date Information.

External Resources

External resources are available for this threat, please sign in for access to external resources.

Security Rule

A security rule is available to identify this threat, please sign in for access to security rules.

Permalink

Link directly to this page.

http://www.idappcom.com/db/?8350