Medium severity6.1NVD Advisory· Published Apr 16, 2018· Updated Jun 17, 2026

CVE-2018-10108

Description

D-Link DIR-815 REV. B (with firmware through DIR-815_REVB_FIRMWARE_PATCH_2.07.B01) devices have XSS in the Treturn parameter to /htdocs/webinc/js/bsc_sms_inbox.php.

Affected products

Dlink/Dir 815 Firmware
cpe:2.3:o:dlink:dir-815_firmware:*:*:*:*:*:*:*:*
Range: <=2.07.b01
Dlink/dir815llm-create
Range: <= DIR-815_REVB_FIRMWARE_PATCH_2.07.B01

Patches

Vulnerability mechanics

References

github.com/iceMatcha/Some-Vulnerabilities-of-D-link-Dir815/blob/master/Vulnerabilities_Summary.mdnvdExploitThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.397
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000