CVE-2015-1028

This Perl script exploits a stored XSS vulnerability in D-Link DSL-2730B modems by injecting malicious payloads into the wlsecrefresh.wl and wlsecurity.wl endpoints. It requires authentication and allows the attacker to execute arbitrary JavaScript in the context of the modem's web interface.

This Perl script exploits a stored XSS vulnerability in D-Link DSL-2730B modems by injecting a malicious payload into the dnsProxy.cmd endpoint. It authenticates with provided credentials, retrieves a session key, and then submits the XSS payload to trigger the vulnerability.

This Perl script exploits a stored XSS vulnerability in D-Link DSL-2730B modems via the lancfg2get.cgi endpoint. It injects a malicious payload into the brName parameter, which is then reflected in the lancfg2.html page.