CVE:CVE-2006-5537
CNNVD:CNNVD-200610-433
D-Link DSL-G624T firmware 3.00B01T01.YA-C.20060616的cgi-bin/webcm中的多个跨站脚本攻击漏洞，远程攻击者可以通过(1)upnp:settings/state或(2)upnp:settings/connection参数来注入任意Web脚本或HTML。
solution:Upgrade d-link dsl-g624t to a higher version than firmware_3.00b01t01.ya_c.2006-06-16,and avoid the version firmware_3.00b01t01.ya_c.2006-06-16