D-Link Dsl-G624T vulnerabilities

3 known vulnerabilities affecting d-link/dsl-g624t.

Total CVEs

3

CISA KEV

0

Public exploits

1

Exploited in wild

0

Severity breakdown

MEDIUM3

Vulnerabilities

Page 1 of 1

CVE-2006-5536MEDIUMCVSS 5.0PoCvfirmware_3.00b01t01.ya_c.2006-06-162006-10-26

CVE-2006-5536 [MEDIUM] CVE-2006-5536: Directory traversal vulnerability in cgi-bin/webcm in D-Link DSL-G624T firmware 3.00B01T01.YA-C.2006 Directory traversal vulnerability in cgi-bin/webcm in D-Link DSL-G624T firmware 3.00B01T01.YA-C.20060616 allows remote attackers to read arbitrary files via a .. (dot dot) in the getpage parameter.

CVE-2006-5538MEDIUMCVSS 5.0v3.00b01t01.ya_c.2006-06-162006-10-26

CVE-2006-5538 [MEDIUM] CVE-2006-5538: D-Link DSL-G624T firmware 3.00B01T01.YA-C.20060616 allows remote attackers to list contents of the c D-Link DSL-G624T firmware 3.00B01T01.YA-C.20060616 allows remote attackers to list contents of the cgi-bin directory via unspecified vectors, probably a direct request.

CVE-2006-5537MEDIUMCVSS 4.3vfirmware_3.00b01t01.ya_c.2006-06-162006-10-26

CVE-2006-5537 [MEDIUM] CVE-2006-5537: Multiple cross-site scripting (XSS) vulnerabilities in cgi-bin/webcm in D-Link DSL-G624T firmware 3. Multiple cross-site scripting (XSS) vulnerabilities in cgi-bin/webcm in D-Link DSL-G624T firmware 3.00B01T01.YA-C.20060616 allow remote attackers to inject arbitrary web script or HTML via the (1) upnp:settings/state or (2) upnp:settings/connection parameters.