Arbitrary Script Injection Vulnerability in D-Link SOHO Routers

CVE-2004-0615 · MEDIUM Severity

AV:N/AC:H/AU:N/C:P/I:P/A:P

Cross-site scripting (XSS) vulnerability in D-Link DI-614+ SOHO router running firmware 2.30, and DI-704 SOHO router running firmware 2.60B2, and DI-624, allows remote attackers to inject arbitrary script or HTML via the DHCP HOSTNAME option in a DHCP request.

Learn more about our Web Application Penetration Testing UK.