← back
CVE-2004-0615

CVE-2004-0615

EPSS 2.4%
Cross-site scripting (XSS) vulnerability in D-Link DI-614+ SOHO router running firmware 2.30, and DI-704 SOHO router running firmware 2.60B2, and DI-624, allows remote attackers to inject arbitrary script or HTML via the DHCP HOSTNAME option in a DHCP request.
Affected products
n/a · n/a
public PoCs found — 1
exploitdbwww.exploit-db.com/exploits/24226unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://archives.neohapsis.com/archives/bugtraq/2004-07/0014.htmlhttp://marc.info/?l=bugtraq&m=108786257609932&w=2http://marc.info/?l=bugtraq&m=108797273127182&w=2http://secunia.com/advisories/11919http://securitytracker.com/id?1010562https://exchange.xforce.ibmcloud.com/vulnerabilities/16468http://www.osvdb.org/7211http://www.securityfocus.com/bid/10587