CVE-2014-10028: XSS
Cross-site scripting (XSS) vulnerability in D-Link DAP-1360 router with firmware 2.5.4 and later allows remote attackers to inject arbitrary web script or HTML via the resbuf parameter to index.cgi when resconfigid is set to 41.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-10028?
CVE-2014-10028 is considered a medium severity cross-site scripting (XSS) vulnerability.
How do I fix CVE-2014-10028?
To fix CVE-2014-10028, update the D-Link DAP-1360 router firmware to the latest version available from the manufacturer.
Who is affected by CVE-2014-10028?
CVE-2014-10028 affects users of the D-Link DAP-1360 router running firmware version 2.5.4 and later.
What type of vulnerability is CVE-2014-10028?
CVE-2014-10028 is a cross-site scripting (XSS) vulnerability that allows remote attackers to inject arbitrary web scripts or HTML.
Can CVE-2014-10028 be exploited remotely?
Yes, CVE-2014-10028 can be exploited remotely by attackers through the res_buf parameter in index.cgi.