← All advisories

Medium severity5.4NVD Advisory· Published May 6, 2024· Updated Jun 17, 2026

CVE-2024-33111

CVE-2024-33111

Description

D-Link DIR-845L router <=v1.01KRb03 is vulnerable to Cross Site Scripting (XSS) via /htdocs/webinc/js/bsc_sms_inbox.php.

Affected products

3

Dlink/Dir 845l Firmware
cpe:2.3:o:dlink:dir-845l_firmware:*:*:*:*:*:*:*:*
Range: <=1.01krb03
Dlink/DIR-882 Routercpe-rescue
Dlink/DIR845L A1llm-create
Range: <=v1.01KRb03

Patches

Vulnerability mechanics

References

1

github.com/yj94/Yj_learning/blob/main/Week16/D-LINK-POC.mdnvdBroken Link

News mentions

0

No linked articles in our index yet.