2 matches found
CVE-2018-10108: Improper Neutralization of Input During Web Page Generation
D-Link DIR-815 REV. B with firmware through DIR-815REVBFIRMWAREPATCH2.07.B01 devices have XSS in the Treturn parameter to /htdocs/webinc/js/bscsmsinbox.php...
6.1CVSS6.8AI score0.01112EPSS
SaveExploits1References2
CVE-2018-6529
XSS vulnerability in htdocs/webinc/js/bscsmsinbox.php in D-Link DIR-868L DIR868LA1FW112b04 and previous versions, DIR-865L DIR-865LREVAFIRMWAREPATCH1.08.B01 and previous versions, and DIR-860L DIR860LA1FW110b04 and previous versions allows remote attackers to read a cookie via a crafted Treturn...
6.1CVSS5.9AI score0.01624EPSS
SaveExploits1References4
20