CVE-2010-0936

D-LINK DKVM-IP8 - Firmware 2282_dlinkA4_p8_20071213 - XSS

Title source: llm
STIX 2.1

Description

Cross-site scripting (XSS) vulnerability in auth.asp on the D-LINK DKVM-IP8 with firmware 2282_dlinkA4_p8_20071213 allows remote attackers to inject arbitrary web script or HTML via the nickname parameter.

Exploits (2)

exploitdb WRITEUP VERIFIED
by POPCORN · textremotehardware
https://www.exploit-db.com/exploits/33471
exploitdb WORKING POC
by POPCORN · textwebappshardware
https://www.exploit-db.com/exploits/11030

References (6)

Core 6
Core References
Exploit vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/37646
Exploit exploit x_refsource_exploit-db
http://www.exploit-db.com/exploits/11030
Vendor Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2010/0083
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/38051
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://osvdb.org/61615
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/55429

Scores

EPSS 0.0083
EPSS Percentile 74.6%

Details

CWE
CWE-79
Status published
Products (1)
d-link/dkvm-ip8 2282_dlinka4_p8_20071213
Published Mar 08, 2010
Tracked Since Feb 18, 2026