CVE-2023-34856
Severity:
MEDIUM
Type:
CWE-79
Cross-Site Scripting (XSS)
Publication date:
09/06/2023
Last modified:
15/06/2023
Description
A Cross Site Scripting (XSS) vulnerability in D-Link DI-7500G-CI-19.05.29A allows attackers to execute arbitrary code via uploading a crafted HTML file to the interface /auth_pic.cgi.
Impact
Base Score 3.x
5.40
Severity 3.x
MEDIUM
Vulnerable products and versions
CPE | From | Up to |
---|---|---|
cpe:2.3:o:dlink:di-7500g-ci_firmware:19.05.29a:*:*:*:*:*:*:* | ||
cpe:2.3:h:dlink:di-7500g-ci:-:*:*:*:*:*:*:* |
To consult the complete list of CPE names with products and versions, see this page