Unscored CVE-2014-10028 EUVD-2014-1100GHSA-vv9p-wrp4-j924

Cross-site scripting (XSS) vulnerability in D-Link DAP-1360 router with firmware 2.5.4 and later allows remote attackers to inject arbitrar…

Published Jan 13, 2015 · Updated Sep 16, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in D-Link DAP-1360 router with firmware 2.5.4 and later allows remote attackers to inject arbitrary web script or HTML via the res_buf parameter to index.cgi when res_config_id is set to 41.

References

http://websecurity.com.ua/7215/
20141129 CSRF and XSS vulnerabilities in D-Link DAP-1360 mailing-list