medium4.3Public exploit code
CVE-2010-0936
Cross-site scripting (XSS) vulnerability in auth.asp on the D-LINK DKVM-IP8 with firmware 2282_dlinkA4_p8_20071213 allows remote attackers to inject arbitrary …
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- D-Link DKVM-IP8 - 'auth.asp' Cross-Site Scripting2010-01-06 · remote · hardware · Verified
- D-Link DKVM-IP8 - Cross-Site Scripting2010-01-06 · webapps · hardware
Impact
Cross-site scripting (XSS) vulnerability in auth.asp on the D-LINK DKVM-IP8 with firmware 2282_dlinkA4_p8_20071213 allows remote attackers to inject arbitrary web script or HTML via the nickname parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| D-Link | Dkvm-Ip8 | Version 2282_dlinka4_p8_20071213 |
Weakness classification
References
- NVD record
- CVE.org record
- http://osvdb.org/61615
- http://secunia.com/advisories/38051
- http://www.exploit-db.com/exploits/11030
- http://www.securityfocus.com/bid/37646
- http://www.vupen.com/english/advisories/2010/0083
- https://exchange.xforce.ibmcloud.com/vulnerabilities/55429
- http://osvdb.org/61615
- http://secunia.com/advisories/38051
- http://www.exploit-db.com/exploits/11030
- http://www.securityfocus.com/bid/37646
- http://www.vupen.com/english/advisories/2010/0083
- https://exchange.xforce.ibmcloud.com/vulnerabilities/55429