Full title: D-Link DIR-615 / DIR-300 XSS / CSRF / Command Injection Vulnerabilities Category: remote exploits Platform: hardware D-Link DIR-615 and DIR-300 suffer from cross site request forgery, OS command injection, lack of cryptographic storage, header injection, and cross site scripting vulnerabilities. # 0day.today @ http://0day.today/