Cross Site Scripting vulnerability in D-Link DAP products DAP-2230, DAP-2310, DAP-2330, DAP-2360, DAP-2553, DAP-2590, DAP-2690, DAP-2695, DAP-3520, DAP-3662 allows a remote attacker to execute arbitrary code via the reload parameter in the session_login.php component.
References
Configurations
No configuration.
History
21 Nov 2024, 09:06
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://djallalakira.medium.com/cve-2024-28436-cross-site-scripting-vulnerability-in-d-link-dap-products-3596976cc99f - | |
| References | () https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10380 - | |
| References | () https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10382 - | |
| References | () https://www.dlink.com/en/security-bulletin/ - |
05 Nov 2024, 19:36
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-79 | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 6.1 |
| Summary |
|
22 Apr 2024, 17:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-04-22 17:15
Updated : 2024-11-21 09:06
NVD link : CVE-2024-28436
Mitre link : CVE-2024-28436
CVE.ORG link : CVE-2024-28436
JSON object : View
Products Affected
No product.
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')