admin/cve
1
0
Fork 0
mirror of https://github.com/0xMarcio/cve.git synced 2025-12-30 04:49:42 +00:00
Code Issues Packages Projects Releases Wiki Activity
cve/2018/CVE-2018-12710.md
0xMarcio 48a00929ac Removed duplicates
2024-06-18 02:51:15 +02:00

757 B
Raw Blame History

CVE-2018-12710

Description

An issue was discovered on D-Link DIR-601 2.02NA devices. Being local to the network and having only "User" account (which is a low privilege account) access, an attacker can intercept the response from a POST request to obtain "Admin" rights due to the admin password being displayed in XML.

POC

Reference

Github

No PoCs found on GitHub currently.