PT-2019-4116

Name of the Vulnerable Software and Affected Versions D-Link DIR-600 B1 version V2.01 D-Link DIR-890L A1 version v1.03 D-Link DIR-615 J1 version v100 D-Link DIR-645 A1 version v1.03 D-Link DIR-815 A1 version v1.01 D-Link DIR-823 A1 version v1.01 D-Link DIR-842 C1 version v3.00 Description The iss...

Sql injection

Specially crafted web requests can cause SQL injections in YouPHPTube 7.6. An attacker can send a web request with Parameter dir in /objects/pluginSwitch.json.php...

CVE-2013-4856

D-Link DIR-865L has Information Disclosure...

CVE-2013-4855

D-Link DIR-865L has SMB Symlink Traversal due to misconfiguration in the SMB service allowing symbolic links to be created to locations outside of the Samba share...

CVE-2013-4857

D-Link DIR-865L has PHP File Inclusion in the router xml file...

Design/Logic Flaw

D-Link DIR-865L has PHP File Inclusion in the router xml file...

Information disclosure

D-Link DIR-865L has Information Disclosure...

Design/Logic Flaw

D-Link DIR-865L has SMB Symlink Traversal due to misconfiguration in the SMB service allowing symbolic links to be created to locations outside of the Samba share...

CVE-2013-4855

D-Link DIR-865L has SMB Symlink Traversal due to misconfiguration in the SMB service allowing symbolic links to be created to locations outside of the Samba share...

CVE-2013-4855

CVE-2013-4855 describes a SMB Symlink Traversal in D-Link DIR-865L caused by SMB service misconfiguration that allows symbolic links to escape the Samba share. Primary sources (NVD, Red Hat, CNVD, CVE List) concur on the affected device and vulnerability class; CVSS v3.1 base score 8.8 (HIGH) wit...

CVE-2013-4856

Technical details about CVE-2013-4856 for D-Link DIR-865L are not publicly provided in the supplied documents. Monitor for updates from vendors and security feeds; current records only note information disclosure without specifics on affected versions, vectors, or fixes.

CVE-2013-4857

D-Link DIR-865L has PHP File Inclusion in the router xml file...

CVE-2013-4857

CVE-2013-4857 affects the D-Link DIR-865L router with a PHP File Inclusion vulnerability in the device’s XML/config handling. Affected component: router XML/file processing; root cause described as PHP File Inclusion in the router XML file. Impact as per sources: potential disclosure/integrity ri...

PT-2019-6976 · D Link · D-Link Dir-865L

Name of the Vulnerable Software and Affected Versions: D-Link DIR-865L affected versions not specified Description: The issue concerns a PHP File Inclusion in the router's xml file. This affects the D-Link DIR-865L router. Recommendations: At the moment, there is no information about a newer...

CVE-2013-4856: Exposure of Sensitive Information to an Unauthorized Actor

D-Link DIR-865L has Information Disclosure...

PT-2019-6975 · D Link · Dir-865L

Name of the Vulnerable Software and Affected Versions: D-Link DIR-865L affected versions not specified Description: The issue concerns information disclosure. There is no information provided about the estimated number of potentially affected devices worldwide or details about real-world incident...

CVE-2013-4857: XML Injection (aka Blind XPath Injection)

D-Link DIR-865L has PHP File Inclusion in the router xml file...

PT-2019-6974 · D Link +1 · D-Link Dir-865L +1

Name of the Vulnerable Software and Affected Versions: D-Link DIR-865L affected versions not specified Description: The issue is related to a misconfiguration in the SMB service, allowing symbolic links to be created to locations outside of the Samba share, which is known as SMB Symlink Traversal...

CVE-2013-4855: Improper Limitation of a Pathname to a Restricted Directory

D-Link DIR-865L has SMB Symlink Traversal due to misconfiguration in the SMB service allowing symbolic links to be created to locations outside of the Samba share...

PT-2019-17492

Name of the Vulnerable Software and Affected Versions YouPHPTube version 7.6 Description The issue allows specially crafted web requests to cause SQL injections. An attacker can exploit this by sending a web request with the dir parameter in the "/objects/pluginSwitch.json.php" endpoint...