cve/2020/CVE-2020-9376.md

CVE-2020-9376

Description

** UNSUPPORTED WHEN ASSIGNED ** D-Link DIR-610 devices allow Information Disclosure via SERVICES=DEVICE.ACCOUNT%0AAUTHORIZED_GROUP=1 to getcfg.php. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.

POC

Reference

• https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10182

Github

• https://github.com/0xT11/CVE-POC
• https://github.com/20142995/Goby
• https://github.com/ARPSyndicate/cvemon
• https://github.com/ARPSyndicate/kenzer-templates
• https://github.com/CnHack3r/Penetration_PoC
• https://github.com/EchoGin404/-
• https://github.com/EchoGin404/gongkaishouji
• https://github.com/HimmelAward/Goby_POC
• https://github.com/Mr-xn/Penetration_Testing_POC
• https://github.com/YIXINSHUWU/Penetration_Testing_POC
• https://github.com/Z0fhack/Goby_POC
• https://github.com/developer3000S/PoC-in-GitHub
• https://github.com/hasee2018/Penetration_Testing_POC
• https://github.com/hectorgie/PoC-in-GitHub
• https://github.com/htrgouvea/research
• https://github.com/huike007/penetration_poc
• https://github.com/lions2012/Penetration_Testing_POC
• https://github.com/merlinepedra/nuclei-templates
• https://github.com/merlinepedra25/nuclei-templates
• https://github.com/nomi-sec/PoC-in-GitHub
• https://github.com/password520/Penetration_PoC
• https://github.com/renatoalencar/dlink-dir610-exploits
• https://github.com/sobinge/nuclei-templates
• https://github.com/soosmile/POC
• https://github.com/winterwolf32/CVE-S---Penetration_Testing_POC-
• https://github.com/xuetusummer/Penetration_Testing_POC
• https://github.com/yedada-wei/-
• https://github.com/yedada-wei/gongkaishouji