cve/2021/CVE-2021-41445.md

CVE-2021-41445

Description

A reflected cross-site-scripting attack in web application of D-Link DIR-X1860 before v1.10WWB09_Beta allows a remote unauthenticated attacker to execute code in the device of the victim via sending a specific URL to the unauthenticated victim.

POC

Reference

• https://www.dlink.com/en/security-bulletin/

Github

• https://github.com/ARPSyndicate/cvemon
• https://github.com/efchatz/easy-exploits