Description
Multiple cross-site scripting (XSS) vulnerabilities in D-Link DSL-2730B router (rev C1) with firmware GE_1.01 allow remote authenticated users to inject arbitrary web script or HTML via the (1) domainname parameter to dnsProxy.cmd (DNS Proxy Configuration Panel); the (2) brName parameter to lancfg2get.cgi (Lan Configuration Panel); the (3) wlAuthMode, (4) wl_wsc_reg, or (5) wl_wsc_mode parameter to wlsecrefresh.wl (Wireless Security Panel); or the (6) wlWpaPsk parameter to wlsecurity.wl (Wireless Password Viewer).
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Exploit-DB 3
- D-Link DSL-2730B Modem - Cross-Site Scripting Injection Stored Wlsecrefresh.wl & Wlsecurity.wl EDB-35747 · webapps · Jan 11, 2015
- D-Link DSL-2730B Modem - Cross-Site Scripting Injection Stored DnsProxy.cmd EDB-35750 · webapps · Jan 11, 2015
- D-Link DSL-2730B Modem - 'Lancfg2get.cgi Persistent Cross-Site Scripting EDB-35751 · webapps · Jan 11, 2015
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
References
- 35751 exploit
- 35747 exploit
- http://www.xlabs.com.br/blog/?p=339
- 35750 exploit