CVE-2024-33111

CVE-2024-33111 D-Link DIR-845L 라우터 버전 1.01KRb03 이하는 /htdocs/webinc/js/bscsmsinbox.php를 통한 크로스 사이트 스크립팅XSS에 취약합니다. 취약한 구성 요소 /htdocs/webinc/js/bscsmsinbox.php 기술 세부 사항 이 취약점은 $GET"Treturn" 매개변수에 대한 필터링 부재로 인해 발생하며, 해당 매개변수는 bscsmsinbox.php의 17번째 줄 코드에서 직접 사용됩니다. 취약한 코드 조각: root@kitploit: var...

CVE-2024-33113

CVE-2024-33113 D-LINK DIR-845L 라우터는 bscsmsinbox.php 파일을 통해 정보 공개Information Disclosure에 취약합니다. CVE-2024-33113은 D-LINK DIR-845L 라우터의 취약점으로, bscsmsinbox.php 파일을 통해 정보가 공개될 수 있습니다. 이 취약점은 include 함수의 부적절한 처리로 인해 발생하며, $file 변수를 조작하여 악용할 수 있습니다. 이를 통해 공격자는 임의의 PHP 스크립트를 포함시키고, 잠재적으로 라우터의 사용자 이름과 비밀번호...

CVE-2024-33113

CVE-2024-33113 D-LINK DIR-845L 라우터는 bscsmsinbox.php 파일을 통해 정보가 노출되는 취약점이 존재합니다. CVE-2024-33113은 D-LINK DIR-845L 라우터의 취약점으로, bscsmsinbox.php 파일을 통해 정보가 노출됩니다. 이 취약점은 include 함수의 부적절한 처리로 인해 발생하며, $file 변수를 조작하여 악용될 수 있습니다. 이를 통해 공격자는 임의의 PHP 스크립트를 포함시키고 라우터의 사용자 이름과 비밀번호 같은 민감한 정보를 검색할 수 있습니다. PoC...

D-LINK DIR-845L bsc_sms_inbox.php file - Information Disclosure

D-LINK DIR-845L DEVICE.ACCOUNT" - "" condition: and - type: status status: - 200 digest: 490a00463044022010f9843bfb91181066716f9b33423f60a6cfd1f4e4b5cf0d2a4189dacce65ea2022...

CVE-2024-29385

DIR-845L router = v1.01KRb03 has an Unauthenticated remote code execution vulnerability in the cgibin binary via soapcgimain function...

CVE-2024-29366

A command injection vulnerability exists in the cgibin binary in DIR-845L router firmware = v1.01KRb03...

CVE-2024-33113

D-LINK DIR-845L =v1.01KRb03 is vulnerable to Information disclosurey via bscsmsinbox.php...

CVE-2024-33111

D-Link DIR-845L router =v1.01KRb03 is vulnerable to Cross Site Scripting XSS via /htdocs/webinc/js/bscsmsinbox.php...

VulnCheck KEV: CVE-2024-33112

D-Link DIR-845L v1.01KRb03 and before is vulnerable to an operating system command injection vulnerability...

D-Link DIR-845L Devices Multiple Vulnerabilities (May 2024)

D-Link DIR-845L devices are prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Exploit for Cross-site Scripting in Dlink Dir-845L_Firmware

CVE-2024-33111 D-Link DIR-845L routers version 1.01KRb03 and b...

The vulnerability in the getcfg.php script of D-Link DIR-845L router microprogramming software allows a hacker to bypass security restrictions and gain increased privileges.

The vulnerability in the getcfg.php script of D-Link DIR-845L router microprogramming software exposes a flaw in access control when processing the $GLOBALS"AUTHORIZEDGROUP" parameter. Exploiting this vulnerability allows an attacker to bypass security restrictions and enhance their privileges...

The vulnerability in the script htdocs/webinc/js/bsc_sms_inbox.php of the D-Link DIR-845L router’s microprogramming software allows a attacker to perform XSS attacks.

The vulnerability in the script htdocs/webinc/js/bscsmsinbox.php of the D-Link DIR-845L router operating system allows an attacker to exploit the system by manipulating the $GET"Treturn" parameter during page processing. Exploiting this vulnerability enables a remote attacker to perform XSS attac...

The vulnerability in the getcfg.php script of D-Link DIR-845L router microprogramming software allows a hacker to gain unauthorized access to protected information.

The vulnerability in the getcfg.php script of D-Link DIR-845L router microprogramming software allows an attacker to gain unauthorized access to protected information when processing the $file parameter. Exploiting this vulnerability can enable a remote attacker to obtain unauthorized access to...

D-Link DIR-845L Command Execution Vulnerability

The D-Link DIR-845L is a wireless router from China-based AUO D-Link. The D-Link DIR-845L suffers from a command execution vulnerability that can be exploited by an attacker to execute arbitrary commands on the system by sending a specially crafted request...

D-Link DIR-845L Cross-Site Scripting Vulnerability

The D-Link DIR-845L is a wireless router from China-based AUO D-Link. A cross-site scripting vulnerability exists in D-Link DIR-845L v1.01KRb03 and earlier versions, which can be exploited by an attacker to execute script in the victim's web browser using a specially crafted URL...

CVE-2024-33112

D-Link DIR-845L router v1.01KRb03 and before is vulnerable to Command injection via the hnapmainfunc...

CVE-2024-33111

D-Link DIR-845L router =v1.01KRb03 is vulnerable to Cross Site Scripting XSS via /htdocs/webinc/js/bscsmsinbox.php...

CVE-2024-33112

D-Link DIR-845L router v1.01KRb03 and before is vulnerable to Command injection via the hnapmainfunc...

CVE-2024-33111

D-Link DIR-845L router =v1.01KRb03 is vulnerable to Cross Site Scripting XSS via /htdocs/webinc/js/bscsmsinbox.php...