CVE-2004-0615

published 2004-12-06

CVE-2004-0615: Cross-site scripting (XSS) vulnerability in D-Link DI-614+ SOHO router running firmware 2.30, and DI-704 SOHO router running firmware 2.60B2, and DI-624…

medium 5.1 CVSS 3.1

AV N AC H Au N C P I P A P

EXPLOIT

Cross-site scripting (XSS) vulnerability in D-Link DI-614+ SOHO router running firmware 2.30, and DI-704 SOHO router running firmware 2.60B2, and DI-624, allows remote attackers to inject arbitrary script or HTML via the DHCP HOSTNAME option in a DHCP request.

Affected

3 ranges

Vendor	Product	Version range	Fixed in
d-link	di-614	—	—
d-link	di-704p	—	—
dlink	di-624	<= 1.28	—