CVE-2019-11017

CVE-2019-11017 affects the D-Link DI-524 router (V2.06RU). The vulnerability is described as multiple Stored and Reflected Cross-Site Scripting (XSS) in the Web Configuration pages: /spap.htm, /smap.htm, and /cgi-bin/smap (via the RC parameter). Root cause noted by CNVD/NVD entries is lack of pro...

D-Link DI-524 Cross-Site Scripting (CVE-2019-11017)

A cross-site scripting vulnerability exists in D-Link DI-524. Successful exploitation of this vulnerability could allow remote attackers to inject arbitrary web script into the affected system...

D-Link DI-524 2.06RU Cross Site Scripting

Exploit Title: Multiple Stored and Reflected XSS vulnerabilities in D-Link DI-524 Date: April 6, 2019 Exploit Author: Semen Alexandrovich Lyhin https://www.linkedin.com/in/semenlyhin/ Vendor Homepage: https://www.dlink.com Version: D-Link DI-524 - V2.06RU CVE : CVE-2019-11017 To re-create Reflect...

D-Link DI-524 V2.06RU - Multiple Cross-Site Scripting

D-Link DI-524 V2.06RU - Multiple Cross-Site Scripting Exploit Title: Multiple Stored and Reflected XSS vulnerabilities in D-Link DI-524 Date: April 6, 2019 Exploit Author: Semen Alexandrovich Lyhin https://www.linkedin.com/in/semenlyhin/ Vendor Homepage: https://www.dlink.com Version: D-Link DI-5...