CVE-2018-17443

CVE-2018-17443 affects D-Link Central WiFi Manager prior to 1.03r0100-Beta1. The vulnerability is a stored XSS in the sitename parameter of the UpdateSite endpoint, enabling injection of arbitrary script/HTML when a user visits the affected page. Public details in connected sources confirm the is...

D-Link Central WiFiManager Software Controller 1.03 - Multiple Vulnerabilities

Core Security - Corelabs Advisory http://corelabs.coresecurity.com/ D-Link Central WiFiManager Software Controller Multiple Vulnerabilities 1. Advisory Information Title: D-Link Central WiFiManager Software Controller Multiple Vulnerabilities Advisory ID: CORE-2018-0010 Advisory URL:...

D-Link Central WiFiManager Software Controller Code Execution / XSS Exploit

D-Link Central WiFiManager Software Controller suffers from hard-coded credential, code execution, and cross site scripting vulnerabilities. Version 1.03 is affected. D-Link Central WiFiManager Software Controller Multiple Vulnerabilities 1. Advisory Information Title: D-Link Central WiFiManager...