CVE-2019-13375

published 2019-07-06

CVE-2019-13375: A SQL Injection was discovered in D-Link Central WiFi Manager CWM(100) before v1.03R0100_BETA6 in PayAction.class.php with the index.php/Pay/passcodeAuth…

critical 9.8 CVSS 3.0

AV N AC L PR N UI N S U C H I H A H

A SQL Injection was discovered in D-Link Central WiFi Manager CWM(100) before v1.03R0100_BETA6 in PayAction.class.php with the index.php/Pay/passcodeAuth parameter passcode. The vulnerability does not need any authentication.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
dlink	central_wifimanager	—	—

CWE-89