CVE-2019-13563

The CVE refers to D-Link DIR-655 C devices before version 3.02B05 BETA03, which are vulnerable to Cross-Site Request Forgery (CSRF) that can affect the entire management console. The root cause is insufficient CSRF protection in the web interface, allowing an attacker to induce unintended actions...

CVE-2019-13563

D-Link DIR-655 C devices before 3.02B05 BETA03 allow CSRF for the entire management console...

CVE-2019-13562

CVE-2019-13562 affects D-Link DIR-655 C devices prior to 3.02B05 BETA03, enabling XSS via web pages /www/ping_response.cgi, /www/ping6_response.cgi, and /www/apply_sec.cgi due to insufficient input validation in the Web UI. Affected firmware is DIR-655 C before 3.02B05 BETA03; remediation per sou...

CVE-2019-13562

D-Link DIR-655 C devices before 3.02B05 BETA03 allow XSS, as demonstrated by the /www/pingresponse.cgi pingipaddr parameter, the /www/ping6response.cgi ping6ipaddr parameter, and the /www/applysec.cgi htmlresponsereturnpage parameter...

CVE-2019-13561

The CVE affects D-Link DIR-655 C devices prior to version 3.02B05 BETA03, where an attacker can remotely execute arbitrary commands via shell metacharacters in the online_firmware_check.cgi check_fw_url parameter. Affected component is the firmware check URL handling in DIR-655 C; root cause is u...

CVE-2019-13560

CVE-2019-13560 affects D-Link DIR-655 C devices prior to version 3.02B05 BETA03, where the vulnerable component is the setup_wizard parameter processed by apply_sec.cgi. The root cause is the ability for remote attackers to force a blank password, enabling unauthorized access through the device’s...

CVE-2014-9518

Cross-site scripting XSS vulnerability in login.cgi in D-Link router DIR-655 rev Bx with firmware before 2.12b01 allows remote attackers to inject arbitrary web script or HTML via the htmlresponsepage parameter...

CVE-2014-9518

CVE-2014-9518 is an XSS in the D-Link router DIR-655 (rev Bx) login.cgi. The vulnerability arises from insufficient input sanitization of the html_response_page parameter, enabling remote attackers to inject arbitrary web script/HTML. Affected firmware versions are before 2.12b01. The cited sourc...

CVE-2014-9518

Cross-site scripting XSS vulnerability in login.cgi in D-Link router DIR-655 rev Bx with firmware before 2.12b01 allows remote attackers to inject arbitrary web script or HTML via the htmlresponsepage parameter...