Menu

Search for hundreds of thousands of exploits

"D-Link DSL-G624T - Var:RelaodHref Cross-Site Scripting"

Author

Exploit author

"Tim Brown"

Platform

Exploit platform

hardware

Release date

Exploit published date

2007-05-03

Download file

1
2
3
4
5
6
7
source: https://www.securityfocus.com/bid/23802/info

D-Link DSL-G624T is prone to a cross-site scripting vulnerability. This issue is due to a failure to properly sanitize user-supplied input.

An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks. 

http://www.example.com/cgi-bin/webcm?getpage=../html/home/home_RelaodHref.htm&var:RelaodHref=a"%20==%20"a"){alert("XSS")}}</script>
Release Date Title Type Platform Author
2020-12-02 "aSc TimeTables 2021.6.2 - Denial of Service (PoC)" local windows "Ismael Nava"
2020-12-02 "Anuko Time Tracker 1.19.23.5311 - No rate Limit on Password Reset functionality" webapps php "Mufaddal Masalawala"
2020-12-02 "Ksix Zigbee Devices - Playback Protection Bypass (PoC)" remote multiple "Alejandro Vazquez Vazquez"
2020-12-02 "Mitel mitel-cs018 - Call Data Information Disclosure" remote linux "Andrea Intilangelo"
2020-12-02 "Artworks Gallery 1.0 - Arbitrary File Upload RCE (Authenticated) via Edit Profile" webapps multiple "Shahrukh Iqbal Mirza"
2020-12-02 "ChurchCRM 4.2.0 - CSV/Formula Injection" webapps multiple "Mufaddal Masalawala"
2020-12-02 "DotCMS 20.11 - Stored Cross-Site Scripting" webapps multiple "Hardik Solanki"
2020-12-02 "ChurchCRM 4.2.1 - Persistent Cross Site Scripting (XSS)" webapps multiple "Mufaddal Masalawala"
2020-12-02 "NewsLister - Authenticated Persistent Cross-Site Scripting" webapps multiple "Emre Aslan"
2020-12-02 "IDT PC Audio 1.0.6433.0 - 'STacSV' Unquoted Service Path" local windows "Manuel Alvarez"
Release Date Title Type Platform Author
2020-11-30 "ATX MiniCMTS200a Broadband Gateway 2.0 - Credential Disclosure" webapps hardware "Zagros Bingol"
2020-11-30 "Intelbras Router RF 301K 1.1.2 - Authentication Bypass" webapps hardware "Kaio Amaral"
2020-11-27 "Ruckus IoT Controller (Ruckus vRIoT) 1.5.1.0.21 - Remote Code Execution" webapps hardware "Emre SUREN"
2020-11-24 "Seowon 130-SLC router 1.0.11 - 'ipAddr' RCE (Authenticated)" webapps hardware maj0rmil4d
2020-11-23 "TP-Link TL-WA855RE V5_200415 - Device Reset Auth Bypass" webapps hardware malwrforensics
2020-11-19 "Fortinet FortiOS 6.0.4 - Unauthenticated SSL VPN User Password Modification" webapps hardware "Ricardo Longatto"
2020-11-19 "Genexis Platinum 4410 Router 2.1 - UPnP Credential Exposure" remote hardware "Nitesh Surana"
2020-11-16 "Cisco 7937G - DoS/Privilege Escalation" remote hardware "Cody Martin"
2020-11-13 "ASUS TM-AC1900 - Arbitrary Command Execution (Metasploit)" webapps hardware b1ack0wl
2020-11-13 "Citrix ADC NetScaler - Local File Inclusion (Metasploit)" webapps hardware "RAMELLA Sebastien"
Release Date Title Type Platform Author
2012-11-01 "Konqueror 4.7.3 - Memory Corruption" dos linux "Tim Brown"
2011-06-30 "IBM DB2 - 'DT_RPATH' Insecure Library Loading Arbitrary Code Execution" remote multiple "Tim Brown"
2011-01-31 "OpenVAS Manager - Command Injection" local linux "Tim Brown"
2010-02-10 "Accellion File Transfer - 'Appliance web_client_user_guide.html?lang' Traversal Arbitrary File Access" remote linux "Tim Brown"
2010-02-10 "Accellion Secure File Transfer Appliance - Multiple Command Restriction Weakness Privilege Escalations" local linux "Tim Brown"
2009-10-27 "KDE 4.3.2 - Multiple Input Validation Vulnerabilities" remote linux "Tim Brown"
2007-11-23 "Bandersnatch 0.4 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities" webapps php "Tim Brown"
2007-07-27 "Bandersnatch 0.4 - Multiple Input Validation Vulnerabilities" webapps php "Tim Brown"
2007-07-10 "ImgSvr 0.6 - 'Template' Local File Inclusion" webapps linux "Tim Brown"
2007-06-11 "JFFNms 0.8.3 - 'auth.php' Multiple SQL Injections" webapps php "Tim Brown"
2007-06-11 "JFFNms 0.8.3 - 'auth.php?user' Cross-Site Scripting" webapps php "Tim Brown"
2007-06-11 "JFFNms 0.8.3 - 'admin/setup.php' Direct Request Authentication Bypass" webapps php "Tim Brown"
2007-06-11 "JFFNms 0.8.3 - 'admin/adm/test.php' PHP Information Disclosure" webapps php "Tim Brown"
2007-05-03 "D-Link DSL-G624T - Var:RelaodHref Cross-Site Scripting" remote hardware "Tim Brown"
2002-11-12 "W3Mail 1.0.6 - File Disclosure" webapps cgi "Tim Brown" 
import requests
response = requests.get('http://127.0.0.1:8181?format=json')

For full documentation follow the link above

Cipherscan. Find out which SSL ciphersuites are supported by a target.

Cipher Protocols Sigalg Trusted

Identify and fingerprint Web Application Firewall (WAF) products protecting a website.

Host WAF detected