Dir 860L Firmware
Approved changes feed: RSS · Atom
cpe:2.3:o:dlink:dir-860l_firmware:*:*:*:*:*:*:*:*
part: o version: * update: *
| Vendor | Dlink (b610c9ff-f722-5d9d-a6df-9bee7f4d4b44) |
|---|---|
| Product | Dir 860L Firmware (396f8e3c-2a8b-5aef-aac9-8a25c4b1d26d) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2018-6530 |
vulnerable | 2026-06-08 05:11:53.926014 |
Details available
OS command injection vulnerability in soap.cgi (soapcgi_main in cgibin) in D-Link DIR-880L DIR-880L_REVA_FIRMWARE_PATCH_1.08B04 and previous versions, DIR-868L DIR868LA1_FW112b04 and previous versions, DIR-65L DIR-865L_REVA_FIRMWARE_PATCH_1.08.B01 and previous versions, and DIR-860L DIR860LA1_FW110b04 and previous versions allows remote attackers to execute arbitrary OS commands via the service parameter.
Published: 2018-03-06T20:00:00.000Z
Updated: 2025-10-21T23:45:55.871Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-6529 |
vulnerable | 2026-06-08 05:11:53.925299 |
Details available
XSS vulnerability in htdocs/webinc/js/bsc_sms_inbox.php in D-Link DIR-868L DIR868LA1_FW112b04 and previous versions, DIR-865L DIR-865L_REVA_FIRMWARE_PATCH_1.08.B01 and previous versions, and DIR-860L DIR860LA1_FW110b04 and previous versions allows remote attackers to read a cookie via a crafted Treturn parameter to soap.cgi.
Published: 2018-03-06T20:00:00.000Z
Updated: 2024-08-05T06:10:10.135Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-6528 |
vulnerable | 2026-06-08 05:11:53.924696 |
Details available
XSS vulnerability in htdocs/webinc/body/bsc_sms_send.php in D-Link DIR-868L DIR868LA1_FW112b04 and previous versions, DIR-865L DIR-865L_REVA_FIRMWARE_PATCH_1.08.B01 and previous versions, and DIR-860L DIR860LA1_FW110b04 and previous versions allows remote attackers to read a cookie via a crafted receiver parameter to soap.cgi.
Published: 2018-03-06T20:00:00.000Z
Updated: 2024-08-05T06:10:10.230Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-6527 |
vulnerable | 2026-06-08 05:11:53.920148 |
Details available
XSS vulnerability in htdocs/webinc/js/adv_parent_ctrl_map.php in D-Link DIR-868L DIR868LA1_FW112b04 and previous versions, DIR-865L DIR-865L_REVA_FIRMWARE_PATCH_1.08.B01 and previous versions, and DIR-860L DIR860LA1_FW110b04 and previous versions allows remote attackers to read a cookie via a crafted deviceid parameter to soap.cgi.
Published: 2018-03-06T20:00:00.000Z
Updated: 2024-08-05T06:10:10.079Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.