mirror of
https://github.com/0xMarcio/cve.git
synced 2025-05-28 01:04:30 +00:00
768 B
768 B
CVE-2018-17441
Description
An issue was discovered on D-Link Central WiFi Manager before v 1.03r0100-Beta1. The 'username' parameter of the addUser endpoint is vulnerable to stored XSS.
POC
Reference
- http://seclists.org/fulldisclosure/2018/Oct/11
- http://seclists.org/fulldisclosure/2018/Oct/11
- https://www.exploit-db.com/exploits/45533/
- https://www.exploit-db.com/exploits/45533/
Github
No PoCs found on GitHub currently.