CVE:CVE-2018-6528
CNNVD:CNNVD-201803-151
D-Link DIR-868L等都是友讯（D-Link）公司的无线路由器产品。
D-Link DIR-868L、DIR-865L和DIR-860L中的htdocs/webinc/body/bsc_sms_send.php文件存在跨站脚本漏洞。远程攻击者可通过向soap.cgi文件发送特制的‘receiver’参数利用该漏洞读取cookie。以下产品和版本受到影响：D-Link DIR-868L DIR868LA1_FW112b04及之前版本；DIR-865L DIR-865L_REVA_FIRMWARE_PATCH_1.08.B01及之前版本；DIR-860L DIR860LA1_FW110b04及之前版本。
solution:Upgrade d-link dir-860l_firmware to a higher version than a1_fw110b04,and avoid the version (,a1_fw110b04]; Upgrade dlink dir-865l_firmware to a higher version than reva_firmware_patch_1.08.b01,and avoid the version (,reva_firmware_patch_1.08.b01]; Upgrade dlink dir-868l_firmware to a higher version than a1_fw112b04,and avoid the version (,a1_fw112b04]