Central Wifimanager
Approved changes feed: RSS · Atom
cpe:2.3:a:dlink:central_wifimanager:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Dlink (b610c9ff-f722-5d9d-a6df-9bee7f4d4b44) |
|---|---|
| Product | Central Wifimanager (3977d169-93bc-535a-bea7-545a3442f3a3) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2019-13372 |
vulnerable | 2026-06-08 05:12:42.175587 |
Details available
/web/Lib/Action/IndexAction.class.php in D-Link Central WiFi Manager CWM(100) before v1.03R0100_BETA6 allows remote attackers to execute arbitrary PHP code via a cookie because a cookie's username field allows eval injection, and an empty password bypasses authentication.
Published: 2019-07-06T22:54:37.000Z
Updated: 2024-08-04T23:49:24.808Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-17443 |
vulnerable | 2026-06-08 05:11:06.362135 |
Details available
An issue was discovered on D-Link Central WiFi Manager before v 1.03r0100-Beta1. The 'sitename' parameter of the UpdateSite endpoint is vulnerable to stored XSS.
Published: 2018-10-08T16:00:00.000Z
Updated: 2024-08-05T10:47:04.946Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-17442 |
vulnerable | 2026-06-08 05:11:06.361685 |
Details available
An issue was discovered on D-Link Central WiFi Manager before v 1.03r0100-Beta1. An unrestricted file upload vulnerability in the onUploadLogPic endpoint allows remote authenticated users to execute arbitrary PHP code.
Published: 2018-10-08T16:00:00.000Z
Updated: 2024-08-05T10:47:04.913Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-17441 |
vulnerable | 2026-06-08 05:11:06.361343 |
Details available
An issue was discovered on D-Link Central WiFi Manager before v 1.03r0100-Beta1. The 'username' parameter of the addUser endpoint is vulnerable to stored XSS.
Published: 2018-10-08T16:00:00.000Z
Updated: 2024-08-05T10:47:04.556Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-17440 |
vulnerable | 2026-06-08 05:11:06.360905 |
Details available
An issue was discovered on D-Link Central WiFi Manager before v 1.03r0100-Beta1. They expose an FTP server that serves by default on port 9000 and has hardcoded credentials (admin, admin). Taking advantage of this, a remote unauthenticated attacker could execute arbitrary PHP code by uploading any file in the web root directory and then accessing it via a request.
Published: 2018-10-08T16:00:00.000Z
Updated: 2024-08-05T10:47:04.562Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.