D-Link Forums

The Graveyard - Products No Longer Supported => IP Cameras => DCS-5020L => Topic started by: trevhuw on March 03, 2017, 01:34:07 PM

Title: Questions about CGI
Post by: trevhuw on March 03, 2017, 01:34:07 PM

Hi,

I'm evaluating a DCS-5020L for a security class to demonstrate its earlier vulnerabilities and how firmware is being updated. I know some of its earlier vulnerabilities were how easily some of the CGI data would display if someone found all the commands from examining the HTML or from the back end, the CGI-Bin directory.

I was wondering if anyone knew how the CGI data is stored and formatted?

Title: Re: Questions about CGI
Post by: RYAT3 on March 03, 2017, 07:37:57 PM

Search the forums.  I'm sure there are other posts.

I did find one in 5020l complaining that the cgi commands no longer work after f/w update.

Here's one such list, I'm sure there are others.

http://forums.dlink.com/index.php?topic=59172.msg234486#msg234486
 (http://forums.dlink.com/index.php?topic=59172.msg234486#msg234486)

Title: Re: Questions about CGI
Post by: FurryNutz on March 09, 2017, 06:32:21 AM

CGI data and formatted maybe a D-Link IP kind of thing so end user knowledge about this may be limited. You might phone contact D-Link support and ask about it.

Quote from: trevhuw on March 03, 2017, 01:34:07 PM

Hi,

I'm evaluating a DCS-5020L for a security class to demonstrate its earlier vulnerabilities and how firmware is being updated. I know some of its earlier vulnerabilities were how easily some of the CGI data would display if someone found all the commands from examining the HTML or from the back end, the CGI-Bin directory.

I was wondering if anyone knew how the CGI data is stored and formatted?