First published: Thu Oct 26 2006(Updated: )
Multiple cross-site scripting (XSS) vulnerabilities in cgi-bin/webcm in D-Link DSL-G624T firmware 3.00B01T01.YA-C.20060616 allow remote attackers to inject arbitrary web script or HTML via the (1) upnp:settings/state or (2) upnp:settings/connection parameters.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
D-Link DSL-G624T | =firmware_3.00b01t01.ya_c.2006-06-16 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2006-5537 is classified as a moderate severity vulnerability due to its potential for cross-site scripting attacks.
To fix CVE-2006-5537, update the D-Link DSL-G624T firmware to the latest version that addresses these vulnerabilities.
CVE-2006-5537 enables remote attackers to perform cross-site scripting (XSS) attacks by injecting arbitrary scripts through specific parameters.
CVE-2006-5537 affects D-Link DSL-G624T routers running firmware version 3.00B01T01.YA-C.20060616.
Exploiting CVE-2006-5537 can lead to unauthorized access to sensitive information or manipulation of the user session in a web application.