Full title: D-Link DSP-W110A1_FW105B0 Cookie Command Execution Exploit Category: remote exploits Platform: hardware This Metasploit module exploits an anonymous remote upload and code execution vulnerability on different D-Link devices. The vulnerability is a command injection in the cookie handling process of the lighttpd web server when handling specially crafted cookie values. This Metasploit module has been successfully tested on D-Link DSP-W110A1_FW105B01 in emulated environment. # 0day.today @ http://0day.today/