CVE-2014-3761

2014-05-1614:00:00

mitre

www.cve.org

cross-site scripting

d-link dap 1150

firmware vulnerability

remote attackers

AI Score

5.8

Confidence

High

EPSS

0.002

Percentile

52.8%

JSON

Cross-site scripting (XSS) vulnerability in D-Link DAP 1150 with firmware 1.2.94 allows remote attackers to inject arbitrary web script or HTML via the res_buf parameter to index.cgi in the Control/URL-filter section.

References

seclists.org/fulldisclosure/2014/Apr/246

websecurity.com.ua/7112