Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
4.3
CVSSv2

CVE-2020-25786

Published: 19/09/2020 Updated: 11/04/2024
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
CVSS v3 Base Score: 6.1 | Impact Score: 2.7 | Exploitability Score: 2.8
VMScore: 383
Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Subscribe to Dlink

Vulnerability Summary

webinc/js/info.php on D-Link DIR-816L 2.06.B09_BETA and DIR-803 1.04.B02 devices allows XSS via the HTTP Referer header. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. NOTE: this is typically not exploitable because of URL encoding (except in Internet Explorer) and because a web page cannot specify that a client should make an additional HTTP request with an arbitrary Referer header

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

dlink dir-803_firmware 1.04.b02

dlink dir-816l_firmware 2.06

dlink dir-816l_firmware 2.06.b09

dlink dir-645_firmware 1.06b01

dlink dir-815_firmware 2.07.b01

dlink dir-860l_firmware 1.10b04

dlink dir-865l_firmware 1.08b01

Vendor Advisories

Check Point Security Alerts: Cross-Site Scripting Over HTTP Headers (CVE-2004-0705; CVE-2005-2869; CVE-2006-4747; CVE-2010-4841; CVE-2016-6285; CVE-2020-20285; CVE-2020-25786; CVE-2020-26574; CVE-2020-35592; CVE-2020-9016; CVE-2021-37216; CVE-2022-35416; CVE-2023-1861; CVE-2023-41642)
Check Point Reference: CPAI-2023-0799 Date Published: 17 Oct 2023 Severity: Critical ...

References

CWE-79https://github.com/sek1th/iot/blob/master/DIR-816L_XSS.mdhttps://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10190https://nvd.nist.govhttps://advisories.checkpoint.com/defense/advisories/public/2023/cpai-2023-0799.html
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-38298CVE-2024-20356CVE-2023-21987CVE-2024-33217bypassCVE-2024-31804CVE-2024-32660unauthorizedSSRF
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook