Security Advisory

CVE-2019-13373

9.8
CRITICAL

Vulnerability Description

An issue was discovered in the D-Link Central WiFi Manager CWM(100) before v1.03R0100_BETA6. Input does not get validated and arbitrary SQL statements can be executed in the database via the /web/Public/Conn.php parameter dbSQL.
Published Date July 6, 2019
Official Source NIST NVD Advisory