Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
4.3
CVSSv2

CVE-2018-15874

Published: 25/08/2018 Updated: 23/04/2021
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
CVSS v3 Base Score: 6.1 | Impact Score: 2.7 | Exploitability Score: 2.8
VMScore: 383
Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Vulnerability Summary

Cross-site scripting (XSS) vulnerability on D-Link DIR-615 routers 20.07 allows an malicious user to inject JavaScript into the "Status -> Active Client Table" page via the hostname field in a DHCP request.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

dlink dir-615_firmware 20.07

Github Repositories

https://github.com/reevesrs24/CVE

CVE Disclosures

CVE-2019-14363 -> Netgear WNDR3400v3 Stack-Based Buffer Overflow via UPnP SSDP CVE-2018-15874 -> D-Link DIR-615 XSS Via DHCP CVE-2018-15875 -> D-Link DIR-615 XSS Via the UPnP Protocol

References

CWE-79https://github.com/reevesrs24/cve/blob/master/D-Link_DIR-615/xss_DHCP/dlink_dir615_xss_dhcp.mdhttps://nvd.nist.govhttps://github.com/reevesrs24/CVE
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-5274CVE-2024-35388CVE-2024-35396elevation of privilegeCVE-2021-47544file uploadCVE-2021-47545memory leakCVE-2024-4956
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook