XSS vulnerability in htdocs/webinc/body/bsc_sms_send.php in D-Link DIR-868L DIR868LA1_FW112b04 and previous versions, DIR-865L DIR-865L_REVA_FIRMWARE_PATCH_1.08.B01 and previous versions, and DIR-860L DIR860LA1_FW110b04 and previous versions allows remote attackers to read a cookie via a crafted receiver parameter to soap.cgi.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2018-03-06T20:00:00
Updated: 2024-08-05T06:10:10.230Z
Reserved: 2018-02-02T00:00:00
Link: CVE-2018-6528
Vulnrichment
No data.
NVD
Status : Analyzed
Published: 2018-03-06T20:29:00.843
Modified: 2023-11-08T21:18:30.427
Link: CVE-2018-6528
Redhat
No data.