D-Link DIR-513 Path Traversal Vulnerability in Authentication Code Handling

A critical path traversal vulnerability has been identified in the D-Link DIR-513 router, specifically in version 1.10. The issue arises in the '/goform/formLogin' endpoint, where POST requests related to verification codes are processed. The vulnerability is caused by the improper filtering of the 'FILECODE' parameter, allowing attackers to traverse directories and potentially access restricted files.

Impact

Exploitation of this vulnerability allows for path traversal, enabling attackers to access files outside the intended directory.

Reproduction

To reproduce this vulnerability, send a POST request to '/goform/formLogin' with a crafted 'curTime' parameter that includes directory traversal sequences. The 'FILECODE' parameter should be left empty. This will trigger the vulnerability by exploiting the lack of proper input validation, allowing for unauthorized file access.