Lucene search
+L

CVE-2015-2049

🗓️ 23 Feb 2015 17:00:00Reported by mitreType 
cve
 cve
🔗 web.nvd.nist.gov👁 65 Views🌐 WEB

Unrestricted file upload in D-Link DCS-931L allows remote code execution

Related
Detection
Refs
Paths
ReporterTitlePublishedViews
Family
zdt
zdt
D-Link DCS-931L - Arbitrary File Upload (Metasploit)
7 Jan 201600:00
zdt
circl
Circl
CVE-2015-2049
7 Jan 201600:00
circl
cnvd
CNVD
D-Link DCS-931L with firmware unlimited file upload vulnerability
28 Feb 201500:00
cnvd
cvelist
Cvelist
CVE-2015-2049
23 Feb 201517:00
cvelist
exploitdb
Exploit DB
D-Link DCS-931L - Arbitrary File Upload (Metasploit)
7 Jan 201600:00
exploitdb
metasploit
Metasploit
D-Link DCS-931L File Upload
23 Feb 201500:00
metasploit
nvd
NVD
CVE-2015-2049
23 Feb 201517:59
nvd
packetstorm
Packet Storm
D-Link DCS-931L Arbitrary File Upload
6 Jan 201600:00
packetstorm
packetstorm
Packet Storm
BSNL Teracom Router Firmware Rewrite / Link Modification
3 Sep 201600:00
packetstorm
prion
Prion
Unrestricted file upload
23 Feb 201517:59
prion
Rows per page
NVD
Node
ParameterPositionPathDescriptionCWE
ReplySuccessPagepathsetFileUploadMultipart form upload endpoint used to upload arbitrary files to the device.
ReplyErrorPagepathsetFileUploadMultipart form upload endpoint used to upload arbitrary files to the device.
FilenamepathsetFileUploadMultipart form upload endpoint used to upload arbitrary files to the device.
UploadFilepathsetFileUploadMultipart form upload endpoint used to upload arbitrary files to the device.
ConfigUploadFilepathsetFileUploadMultipart form upload endpoint used to upload arbitrary files to the device.
ReplySuccessPagepathsetSystemAdminEndpoint used to trigger execution of the uploaded payload via admin configuration.
ReplyErrorPagepathsetSystemAdminEndpoint used to trigger execution of the uploaded payload via admin configuration.
ConfigSystemAdminpathsetSystemAdminEndpoint used to trigger execution of the uploaded payload via admin configuration.

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

17 Jun 2026 00:23Current
7.5High risk
Vulners AI Score7.5
CVSS 29
EPSS0.66674
65