24 matches found
CVE-2018-10107
D-Link DIR-815 REV. B with firmware through DIR-815REVBFIRMWAREPATCH2.07.B01 devices have XSS in the RESULT parameter to /htdocs/webinc/js/info.php...
D-Link DIR-815 Cross-Site Scripting Vulnerability (CNVD-2018-08947)
D-Link DIR-815 REV.B is a wireless router product from AUO D-Link. A cross-site scripting vulnerability exists in the D-Link DIR-815 REV. B using firmware DIR-815REVBFIRMWAREPATCH2.07.B01 and prior versions. A remote attacker can exploit this vulnerability by sending the 'RESULT' parameter to the...
CVE-2017-7249
Multiple Cross-Site Scripting XSS were discovered in Gazelle before 2017-03-19. The vulnerabilities exist due to insufficient filtration of user-supplied data action, userid passed to the 'Gazelle-master/sections/tools/data/ocelotinfo.php' URL. An attacker could execute arbitrary HTML and script...