Unscored severity · published Jan 13, 2015
CVE-2014-10028
Cross-site scripting (XSS) vulnerability in D-Link DAP-1360 router with firmware 2.5.4 and later allows remote attackers to inject arbitrary web script or HTML via the res_buf…
–
CVSS
1%
EPSS
No
On KEV
Description
Cross-site scripting (XSS) vulnerability in D-Link DAP-1360 router with firmware 2.5.4 and later allows remote attackers to inject arbitrary web script or HTML via the res_buf parameter to index.cgi when res_config_id is set to 41.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.0% · higher than 63% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DF
Dap-1360 Firmware · Dlink
through 2.5.4 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2014-10028
CVE.org
https://www.cve.org/CVERecord?id=CVE-2014-10028
Exploit
http://seclists.org/fulldisclosure/2014/Nov/100
Exploit
http://websecurity.com.ua/7215/
More from Dap-1360 Firmware
8.8
CVE-2023-32146
D-Link DAP-1360 Multiple Parameters Stack-Based Buffer Overflow Remote Code Execution Vulnerability
8.8
CVE-2023-32145
D-Link DAP-1360 Hardcoded Credentials Authentication Bypass Vulnerability
8.8
CVE-2023-32144
D-Link DAP-1360 webproc COMM_MakeCustomMsg Stack-based Buffer Overflow Remote Code Execution Vulnerability
8.8
CVE-2023-32143
D-Link DAP-1360 webupg UPGCGI_CheckAuth Numeric Truncation Remote Code Execution Vulnerability
8.8
CVE-2023-32142
D-Link DAP-1360 webproc var:page Stack-based Buffer Overflow Remote Code Execution Vulnerability