ID CVE-2006-2653
Summary Cross-site scripting (XSS) vulnerability in login_error.shtml for D-Link DSA-3100 allows remote attackers to inject arbitrary HTML or web script via an encoded uname parameter.
References
Vulnerable Configurations
  • cpe:2.3:h:d-link:dsa-3100_airspot_gateway:*:*:*:*:*:*:*:*
    cpe:2.3:h:d-link:dsa-3100_airspot_gateway:*:*:*:*:*:*:*:*
CVSS
Base: 2.6 (as of 18-10-2018 - 16:41)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
NETWORK HIGH NONE
Impact
ConfidentialityIntegrityAvailability
NONE PARTIAL NONE
cvss-vector via4 AV:N/AC:H/Au:N/C:N/I:P/A:N
refmap via4
bid 18168
bugtraq 20060527 D-Link DSA-3100 Cross-Site Scripting
misc http://www.eazel.es/media/advisory003-D-Link-DSA-3100-Cross-Site-Scripting.html
sectrack 1016173
secunia 20343
sreason 980
vupen ADV-2006-2028
xf dlink-airspot-uname-xss(26759)
Last major update 18-10-2018 - 16:41
Published 30-05-2006 - 10:02
Last modified 18-10-2018 - 16:41
Back to Top