CVE-2025-57636

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

OS Command injection vulnerability in D-Link C1 2020-02-21. The sub_47F028 function in jhttpd contains a command injection vulnerability via the HTTP parameter "time".

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Weakness enumeration

CWE-78

Affected software

No affected versions have been published.

Timeline

Published: Sep 23, 2025
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2025

CVE-2025-576377.5Buffer overflow vulnerability in D-Link DI-7100G 2020-02-21 in the sub_451754 function of the jhttpd service in the viav4 parameter allowing CVE-2025-576387.5Buffer overflow vulnerability in Tenda AC9 1.0 via the user supplied sys.vendor configuration value.CVE-2025-576396.5OS Command injection vulnerability in Tenda AC9 1.0 was discovered to contain a command injection vulnerability via the usb.samba.guest.user CVE-2025-57645.4A vulnerability was found in code-projects Laundry System 1.0 and classified as problematic. Affected by this issue is some unknown function CVE-2025-576427.2A Shell Upload vulnerability in Tourism Management System 2.0 allows an attacker to upload and execute arbitrary PHP shell scripts on the se CVE-2025-576449.1Accela Automation Platform 22.2.3.0.230103 contains multiple vulnerabilities in the Test Script feature. An authenticated administrative use CVE-2025-57655.4A vulnerability was found in code-projects Laundry System 1.0. It has been classified as problematic. This affects an unknown part of the fi CVE-2025-57664.3A vulnerability was found in code-projects Laundry System 1.0. It has been declared as problematic. This vulnerability affects unknown code.CVE-2025-576656.4Element Plus Link component (el-link) through 2.10.6 implements insufficient input validation for the href attribute, creating a security ab CVE-2025-57676.4The Crowdfunding for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘width’ parameter in all versions CVE-2025-576815.4The WorklogPRO - Timesheets for Jira plugin in Jira Data Center before version 4.23.6-jira10 and before version 4.23.5-jira9 allows users an CVE-2025-576826.5Directory Traversal vulnerability in Papermark 0.20.0 and prior allows authenticated attackers to retrieve arbitrary files from an S3 bucket