CVE-2018-17441

Published: Oct 8, 2018

Modified: Aug 5, 2024

PUBLISHED

Description

An issue was discovered on D-Link Central WiFi Manager before v 1.03r0100-Beta1. The 'username' parameter of the addUser endpoint is vulnerable to stored XSS.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

45533

exploit

x_refsource_EXPLOIT-DB

https://www.secureauth.com/labs/advisories/d-link-central-wifimanager-software-controller-multiple-vulnerabilities

x_refsource_MISC

20181004 [CORE-2010-0010] - D-Link Central WiFiManager Software Controller Multiple

mailing-list

x_refsource_FULLDISC

https://securityadvisories.dlink.com/announcement/publication.aspx?name=SAP10092

x_refsource_CONFIRM

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2018-17441

Description

Affected Products

References