medium4.8Public exploit code
CVE-2019-11017
On D-Link DI-524 V2.06RU devices, multiple Stored and Reflected XSS vulnerabilities were found in the Web Configuration: /spap.htm, /smap.htm, and /cgi-bin/sma…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- D-Link DI-524 V2.06RU - Multiple Cross-Site Scripting2019-04-10 · webapps · hardware
Impact
On D-Link DI-524 V2.06RU devices, multiple Stored and Reflected XSS vulnerabilities were found in the Web Configuration: /spap.htm, /smap.htm, and /cgi-bin/smap, as demonstrated by the cgi-bin/smap RC parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dlink | Di-524 Firmware | Version 2.06ru |