dir-868l Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/dir-868l/ Sun, 26 Feb 2023 06:51:47 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png dir-868l Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/dir-868l/ 32 32 CVE-2018-9284 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-9284/ Sun, 26 Feb 2023 06:51:47 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-9284/ authentication.cgi on D-Link DIR-868L devices with Singapore StarHub firmware before v1.21SHCb03 allows remote attackers to execute arbitrary code.

The post CVE-2018-9284 appeared first on CVE Vulnerability.

]]> authentication.cgi on D-Link DIR-868L devices with Singapore StarHub firmware before v1.21SHCb03 allows remote attackers to execute arbitrary code.

The post CVE-2018-9284 appeared first on CVE Vulnerability.

]]> CVE-2018-19988 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-19988/ Sun, 26 Feb 2023 06:48:23 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-19988/ In the /HNAP1/SetClientInfoDemo message, the AudioMute and AudioEnable parameters are vulnerable, and the vulnerabilities affect D-Link DIR-868L Rev.B 2.05B02 devices. In the SetClientInfoDemo.php source code, the AudioMute and AudioEnble parameters are saved in the ShellPath script file without any regex checking. After the script file is executed, the command injection occurs. It needs to bypass […]

The post CVE-2018-19988 appeared first on CVE Vulnerability.

]]> In the /HNAP1/SetClientInfoDemo message, the AudioMute and AudioEnable parameters are vulnerable, and the vulnerabilities affect D-Link DIR-868L Rev.B 2.05B02 devices. In the SetClientInfoDemo.php source code, the AudioMute and AudioEnble parameters are saved in the ShellPath script file without any regex checking. After the script file is executed, the command injection occurs. It needs to bypass the wget command option with a single quote. A vulnerable /HNAP1/SetClientInfoDemo XML message could have single quotes and backquotes in the AudioMute or AudioEnable element, such as the ‘`telnetd`’ string.

The post CVE-2018-19988 appeared first on CVE Vulnerability.

]]>