Lucene search
HistoryOct 17, 2023 - 6:15 a.m.
CVE-2023-44694
d-link
dar-7000
v31r02b1413c
sql injection
log
mailrecvview.php
cve-2023-44694
nvd
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
9.8 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
31.3%
D-Link Online behavior audit gateway DAR-7000 V31R02B1413C is vulnerable to SQL Injection via /log/mailrecvview.php.
Affected configurations
Node
dlinkdar-7000_firmwareMatchv31r02b1413c
dlinkdar-7000Match-
| CPE | Name | Operator | Version |
|---|---|---|---|
| dlink:dar-7000_firmware | dlink dar-7000 firmware | eq | v31r02b1413c |
Related
cvelist
cvelist
CVE-2023-44694
2023-10-17 00:00:00
cnvd
cnvd
D-Link DAR-7000 mailrecvview.php File SQL Injection Vulnerability
2023-10-20 00:00:00
prion
prion
Sql injection
2023-10-17 06:15:00
nvd
nvd
CVE-2023-44694
2023-10-17 06:15:09
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
9.8 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
31.3%
Related for CVE-2023-44694