XSS in D-Link Dir-655
CVE-2014-9518
Cross-site scripting (XSS) vulnerability in login.cgi in D-Link router DIR-655 (rev Bx) with firmware before 2.12b01 allows remote attackers to inject arbitrary web script or HTML via the html_response_page parameter.
Vulnerability class: XSS (Cross-Site Scripting)
EPSS: 0.010 (60.5th percentile) — read the EPSS interpretation.
Affected products
- D-link Dir-655 — versions bx
- D-link Dir-655_firmware
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (x_refsource_SECUNIA, third-party-advisory)
- cve@mitre.org (x_refsource_CONFIRM, Exploit)
- cve@mitre.org (vdb-entry, x_refsource_BID)