Print

Please login or register.
1 Hour 1 Day 1 Week 1 Month Forever
Login with username, password and session length

[trevhuw]

Hi,

I'm evaluating a DCS-5020L for a security class to demonstrate its earlier vulnerabilities and how firmware is being updated. I know some of its earlier vulnerabilities were how easily some of the CGI data would display if someone found all the commands from examining the HTML or from the back end, the CGI-Bin directory.

I was wondering if anyone knew how the CGI data is stored and formatted?

[RYAT3]

Search the forums.  I'm sure there are other posts.

I did find one in 5020l complaining that the cgi commands no longer work after f/w update.

Here's one such list, I'm sure there are others.

http://forums.dlink.com/index.php?topic=59172.msg234486#msg234486

[FurryNutz]

CGI data and formatted maybe a D-Link IP kind of thing so end user knowledge about this may be limited. You might phone contact D-Link support and ask about it.

Hi,

I'm evaluating a DCS-5020L for a security class to demonstrate its earlier vulnerabilities and how firmware is being updated. I know some of its earlier vulnerabilities were how easily some of the CGI data would display if someone found all the commands from examining the HTML or from the back end, the CGI-Bin directory.

I was wondering if anyone knew how the CGI data is stored and formatted?