D-Link DIR-859 Path Traversal Vulnerability

The D-Link DIR-859 is a wireless router from China's AUO D-Link. A path traversal vulnerability exists in the D-Link DIR-859 version 1.06B01, which stems from the parameter service in the file /hedwig.cgi that causes path traversal...

CVE-2023-39638

CVE-2023-39638 affects D-LINK DIR-859 A1 1.05 through A1 1.06B01 Beta01. A command injection exists in the lxmldbc_system function at the /htdocs/cgibin endpoint, linked to a failure to neutralize special elements, enabling remote arbitrary command execution. There is no public exploitation detai...

D-Link DIR-859 Command Injection Vulnerability

The D-Link DIR-859 is a wireless router from China-based AUO D-Link. A command injection vulnerability exists in the D-LINK DIR-859 A1 1.05 and A1 1.06B01 Beta01 versions, which originates from the lxmldbcsystem function in /htdocs/cgibin that contains a command injection vulnerability...