CNNVD-202508-1872 Information

CNNVD ID

CNNVD-202508-1872

CVE-2025-9003

  • CNNVD Published: 2025-08-15

Description (Chinese)

D-Link DIR-818LW是中国友讯(D-Link)公司的一款无线路由器。 D-Link DIR-818LW 1.04版本存在代码注入漏洞,该漏洞源于对文件/bsc_lan.php中参数Name的错误操作导致跨站脚本攻击。

Description (English)

D-Link DIR-818LW is a wireless router for the Chinese company D-Link. Version 1.04 of D-Link DIR-818LW has a code-injection loophole that results from an error in the parameter name of the file/bsc lan.php that resulted in a cross-site script attack.

Hazard Level

Critical

Vulnerability Type

代码注入

Affected Vendor

友讯

Published

2025-08-15

Last Modified

2026-02-24

References

https://www.dlink.com/ https://vuldb.com/?submit.628334 https://vuldb.com/?id.320032 https://vuldb.com/?ctiid.320032 https://access.redhat.com/security/cve/cve-2025-9003 https://nvd.nist.gov/vuln/detail/CVE-2025-9003

Share on: