Cross-site scripting (XSS) vulnerability in D-Link DI-614+ SOHO router running firmware 2.30, and DI-704 SOHO router running firmware 2.60B2, and DI-624, allows remote attackers to inject arbitrary script or HTML via the DHCP HOSTNAME option in a DHCP request.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Di-704p | D-link | 2.60b2 | 2.60b2 |
Di-614+ | D-link | 2.30 | 2.30 |
Di-624 | Dlink | * | 1.28 |