Lucene search
PRIOn knowledge basePRION:CVE-2018-6212HistoryJun 20, 2018 - 4:29 p.m.
Cross site scripting
2018-06-2016:29:00
PRIOn knowledge base
www.prio-n.com
2
0.001 Low
EPSS
Percentile
46.0%
On D-Link DIR-620 devices with a certain customized (by ISP) variant of firmware 1.0.3, 1.0.37, 1.3.1, 1.3.3, 1.3.7, 1.4.0, and 2.0.22, a reflected Cross-Site Scripting (XSS) attack is possible as a result of missed filtration for special characters in the “Search” field and incorrect processing of the XMLHttpRequest object.
References
Related
nvd
nvd
CVE-2018-6212
2018-06-20 16:29:00
cve
cve
CVE-2018-6212
2018-06-20 16:29:00
cvelist
cvelist
CVE-2018-6212
2018-06-20 16:00:00
securelist
securelist
Backdoors in D-Link’s backyard
2018-05-23 10:00:06