CVE-2013-7389
EXPLOITEDD-Link DIR-645 < 1.04B11 - Cross-Site Scripting via Parental Controls Bind Parameter
Title source: llmExploitation Summary
CVE-2013-7389 has been observed exploited in the wild (reported by VulnCheck KEV).
EIP tracks 3 public exploits from researchers including Roberto Paleari, Roberto Paleari, Craig Heffner, including a Metasploit module exploits/linux/http/dlink_authentication_cgi_bof.
AI-analyzed exploit summary The exploit details multiple vulnerabilities in D-Link DIR-645 firmware 1.03B08, including buffer overflows in 'post_login.xml', 'hedwig.cgi', and 'authentication.cgi', as well as XSS vulnerabilities in 'bind.php', 'info.php', and 'bsc_sms_send.php'. Proof-of-concept commands are provided for each vulnerability, demonstrating remote code execution and cross-site scripting.
Description
Multiple cross-site scripting (XSS) vulnerabilities in D-Link DIR-645 Router (Rev. A1) with firmware before 1.04B11 allow remote attackers to inject arbitrary web script or HTML via the (1) deviceid parameter to parentalcontrols/bind.php, (2) RESULT parameter to info.php, or (3) receiver parameter to bsc_sms_send.php.
Exploits (3)
The exploit details multiple vulnerabilities in D-Link DIR-645 firmware 1.03B08, including buffer overflows in 'post_login.xml', 'hedwig.cgi', and 'authentication.cgi', as well as XSS vulnerabilities in 'bind.php', 'info.php', and 'bsc_sms_send.php'. Proof-of-concept commands are provided for each vulnerability, demonstrating remote code execution and cross-site scripting.
This Metasploit module exploits a buffer overflow vulnerability in D-Link routers via the authentication.cgi endpoint by sending a maliciously crafted POST request with an overly long password field. It achieves remote code execution (RCE) by leveraging a cmdstager to execute arbitrary commands on the target device.
This Metasploit module exploits a buffer overflow vulnerability in D-Link routers via the hedwig.cgi endpoint by sending a maliciously crafted cookie header. It achieves remote code execution by leveraging a stack-based overflow to control the instruction pointer and execute arbitrary commands.