CVE-2018-17442

CVE-2018-17442 affects D-Link Central WiFi Manager prior to version 1.03r0100-Beta1. The vulnerability lies in an unrestricted file upload via the onUploadLogPic endpoint, which can be exploited by remote authenticated users to achieve remote code execution (PHP) by uploading a crafted archive (....

CVE-2018-17442

creationtimestamp| type| source ---|---|--- 2018-10-05 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/45533...

D-Link Central WiFiManager Software Controller Code Execution / XSS Exploit

D-Link Central WiFiManager Software Controller suffers from hard-coded credential, code execution, and cross site scripting vulnerabilities. Version 1.03 is affected. D-Link Central WiFiManager Software Controller Multiple Vulnerabilities 1. Advisory Information Title: D-Link Central WiFiManager...

D-Link Central WiFiManager Software Controller 1.03 - Multiple Vulnerabilities

Core Security - Corelabs Advisory http://corelabs.coresecurity.com/ D-Link Central WiFiManager Software Controller Multiple Vulnerabilities 1. Advisory Information Title: D-Link Central WiFiManager Software Controller Multiple Vulnerabilities Advisory ID: CORE-2018-0010 Advisory URL:...