D-Link Central WiFiManager Software Controller Multiple Vulnerabilities

🗓️ 04 Oct 2018 00:00:00Reported by Core SecurityType

coresecurity👁 556 Views

D-Link Central WiFiManager Software Controller Multiple Vulnerabilities. Unrestricted file upload, improper authorization, and cross-site scripting lead to code execution. Hardcoded FTP credentials

Reporter	Title	Published	Views	Family All 42
0day.today	D-Link Central WiFiManager Software Controller Code Execution / XSS Exploit	5 Oct 201800:00	–	zdt
BDU FSTEC	The vulnerability of the UpdateSite function in the software controller for centralized control of wireless networks by D-Link Central WiFi Manager allows a intruder to inject any arbitrary code into the uploaded web page.	10 Jan 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the onUploadLogPic component of the software controller allows for the insertion of arbitrary HTML code by intruders, enabling them to manipulate wireless networks through the D-Link Central WiFi Manager.	10 Jan 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the software controller for the centralized control of wireless networks by D-Link Central WiFi Manager arises from the lack of measures taken to protect the website structure. This allows a hacker to inject arbitrary code into the uploaded web page.	10 Jan 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the software controller for the centralized control of wireless networks by D-Link Central WiFi Manager arises from the use of pre-installed credentials. This allows a hacker to execute arbitrary PHP code.	10 Jan 201900:00	–	bdu_fstec
Circl	CVE-2018-17440	5 Oct 201800:00	–	circl
Circl	CVE-2018-17441	5 Oct 201800:00	–	circl
Circl	CVE-2018-17442	5 Oct 201800:00	–	circl
Circl	CVE-2018-17443	5 Oct 201800:00	–	circl
CNVD	D-Link Central WiFi Manager Cross-Site Scripting Vulnerability (CNVD-2018-20464)	10 Oct 201800:00	–	cnvd