CVE-2023-44959

An issue found in D-Link DSL-3782 v.1.03 and before allows remote authenticated users to execute arbitrary code as root via the Router IP Address fields of the network settings page...

CVE-2023-44959: Improper Neutralization of Special Elements used in a Command

An issue found in D-Link DSL-3782 v.1.03 and before allows remote authenticated users to execute arbitrary code as root via the Router IP Address fields of the network settings page...

CVE-2023-27216

An issue found in D-Link DSL-3782 v.1.03 allows remote authenticated users to execute arbitrary code as root via the network settings page...

CVE-2023-27216

An issue found in D-Link DSL-3782 v.1.03 allows remote authenticated users to execute arbitrary code as root via the network settings page...

Code injection

An issue found in D-Link DSL-3782 v.1.03 allows remote authenticated users to execute arbitrary code as root via the network settings page...

CVE-2023-27216: Improper Neutralization of Special Elements used in an OS Command

An issue found in D-Link DSL-3782 v.1.03 allows remote authenticated users to execute arbitrary code as root via the network settings page...

CVE-2023-27216

An issue found in D-Link DSL-3782 v.1.03 allows remote authenticated users to execute arbitrary code as root via the network settings page...

CVE-2023-27216

CVE-2023-27216 affects D-Link DSL-3782 v1.03, enabling remote authenticated attackers to execute arbitrary code as root via the network settings page. The issue arises on the device’s web interface (network settings) where crafted input can trigger code execution with root privileges. Public refe...

PT-2023-21013 · D Link · D-Link Dsl-3782

Name of the Vulnerable Software and Affected Versions: D-Link DSL-3782 version 1.03 Description: An issue in the D-Link DSL-3782 allows remote authenticated users to execute arbitrary code as root via the network settings page. Recommendations: For D-Link DSL-3782 version 1.03, consider restricti...

CVE-2016-6634

Cross-site scripting XSS vulnerability in the network settings page in WordPress before 4.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2016-6634: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the network settings page in WordPress before 4.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

PT-2016-7009

Name of the Vulnerable Software and Affected Versions WordPress versions prior to 4.5 Description A cross-site scripting XSS issue exists in the network settings page, allowing remote attackers to inject arbitrary web script or HTML. Recommendations For versions prior to 4.5, update to version 4....