medium4.8Public exploit code
CVE-2018-10110
D-Link DIR-615 T1 devices allow XSS via the Add User feature.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- D-Link DIR-615 Wireless Router - Persistent Cross Site Scripting2018-04-17 · remote · hardware
Impact
D-Link DIR-615 T1 devices allow XSS via the Add User feature.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| D-Link | Dir-615 T1 Firmware | Version 20.07 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/147184/D-Link-DIR-615-Cross-Site-Scripting.html
- https://hacksayan.wordpress.com/d-link-dir-615-wireless-router-persistent-cross-site-scripting-xss/
- https://www.exploit-db.com/exploits/44473/
- http://packetstormsecurity.com/files/147184/D-Link-DIR-615-Cross-Site-Scripting.html
- https://hacksayan.wordpress.com/d-link-dir-615-wireless-router-persistent-cross-site-scripting-xss/
- https://www.exploit-db.com/exploits/44473/