dlink dir-816l firmware 2.06 vulnerabilities and exploits

(subscribe to this query)

An XSS issue exists on D-Link DIR-816L devices 2.x prior to 1.10b04Beta02. In the file webinc/js/info.php, no output filtration is applied to the RESULT parameter, before it's printed on the webpage.

Dlink Dir-816l Firmware 2.06 Dlink Dir-816l Firmware 2.06.b09

An issue exists on D-Link DIR-816L devices 2.x prior to 1.10b04Beta02. Universal Plug and Play (UPnP) is enabled by default on port 1900. An attacker can perform command injection by injecting a payload into the Search Target (ST) field of the SSDP M-SEARCH discover packet.

Dlink Dir-816l Firmware 2.06 Dlink Dir-816l Firmware 2.06.b09

An issue exists on D-Link DIR-816L devices 2.x prior to 1.10b04Beta02. There exists an exposed administration function in getcfg.php, which can be used to call various services. It can be utilized by an malicious user to retrieve various sensitive information, such as admin login...

Dlink Dir-816l Firmware 2.06 Dlink Dir-816l Firmware 2.06.b09

webinc/js/info.php on D-Link DIR-816L 2.06.B09_BETA and DIR-803 1.04.B02 devices allows XSS via the HTTP Referer header. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. NOTE: this is typically not exploitable because of URL encoding ...

Dlink Dir-803 Firmware 1.04.b02 Dlink Dir-816l Firmware 2.06 Dlink Dir-816l Firmware 2.06.b09 Dlink Dir-645 Firmware 1.06b01 Dlink Dir-815 Firmware 2.07.b01 Dlink Dir-860l Firmware 1.10b04 Dlink Dir-865l Firmware 1.08b01

D-Link routers with the mydlink feature have some web interfaces without authentication requirements. An attacker can remotely obtain users' DNS query logs and login logs. Vulnerable targets include but are not limited to the latest firmware versions of DIR-817LW (A1-1.04), ...

Dlink Dir-817lw Firmware 1.04 Dlink Dir-816l Firmware 2.06 Dlink Dir-816 Firmware 2.06 Dlink Dir-850l Firmware 1.09 Dlink Dir-868l Firmware 1.10

2 Github repositories

Multiple cross-site request forgery (CSRF) vulnerabilities in the D-Link DIR-816L Wireless Router with firmware prior to 2.06.B09_BETA allow remote malicious users to hijack the authentication of administrators for requests that (1) change the admin password, (2) change the netwo...

Dlink Dir-816l Firmware

1 EDB exploit

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook