Published: 21/01/2015 Updated: 26/04/2023

CVSS v2 Base Score: 3.5 | Impact Score: 2.9 | Exploitability Score: 6.8

VMScore: 365

Vector: AV:N/AC:M/Au:S/C:N/I:P/A:N

Multiple cross-site scripting (XSS) vulnerabilities in D-Link DSL-2730B router (rev C1) with firmware GE_1.01 allow remote authenticated users to inject arbitrary web script or HTML via the (1) domainname parameter to dnsProxy.cmd (DNS Proxy Configuration Panel); the (2) brName parameter to lancfg2get.cgi (Lan Configuration Panel); the (3) wlAuthMode, (4) wl_wsc_reg, or (5) wl_wsc_mode parameter to wlsecrefresh.wl (Wireless Security Panel); or the (6) wlWpaPsk parameter to wlsecurity.wl (Wireless Password Viewer).

Vulnerable Product	Search on Vulmon	Subscribe to Product
dlink dsl-2730b_firmware ge_1.01

# Exploit Title: D-Link DSL-2730B Modem dnsProxycmd Exploit XSS Injection Stored # Date: 11-01-2015 # Exploit Author: Mauricio Correa # Vendor Homepage: wwwdlinkcom # Hardware version: C1 # Version: GE 101 # Tested on: Windows 8 and Linux #!/usr/bin/perl # # Date dd-mm-aaaa: 11-11-2014 # Exploit for D-Link DSL-2730B # Cross Site Scripting (XS ...

# Exploit Title: D-Link DSL-2730B Modem lancfg2getcgi Exploit XSS Injection Stored # Date: 11-01-2015 # Exploit Author: Mauricio Correa # Vendor Homepage: wwwdlinkcom # Hardware version: C1 # Version: GE 101 # Tested on: Windows 8 and Linux #!/usr/bin/perl # # Date dd-mm-aaaa: 11-11-2014 # Exploit for D-Link DSL-2730B # Cross Site Scripting ...

# Exploit Title: D-Link DSL-2730B Modem wlsecrefreshwl & wlsecuritywl Exploit XSS Injection Stored # Date: 11-01-2015 # Exploit Author: Mauricio Correa # Vendor Homepage: wwwdlinkcom # Hardware version: C1 # Version: GE 101 # Tested on: Windows 8 and Linux #!/usr/bin/perl # # Date dd-mm-aaaa: 11-11-2014 # Exploit for D-Link DSL-2730B # Cr ...

CWE-79 http://www.exploit-db.com/exploits/35751 http://www.xlabs.com.br/blog/?p=339 http://www.exploit-db.com/exploits/35747 http://www.exploit-db.com/exploits/35750 https://nvd.nist.gov https://www.exploit-db.com/exploits/35750/

CVE-2015-1028

Vulnerability Summary

Vulnerability Trend

Exploits

References

Vulmon Search

About

Products

Connect