Lucene search
+L

CVE-2023-5147

🗓️ 25 Sep 2023 00:31:05Reported by VulDBType 
cve
 cve
🔗 web.nvd.nist.gov👁 146 Views🌐 WEB

CVE-2023-5147 A critical unrestricted file upload vulnerability in D-Link DAR-7000 up to 20151231

Related
Detection
Affected
Refs
Paths
ReporterTitlePublishedViews
Family
bdu_fstec
BDU FSTEC
D-Link DAR-7000 Router Arbitrary Command Execution
3 Oct 202300:00
–bdu_fstec
cnnvd
CNNVD
D-Link DAR-7000 Code Issue Vulnerability
24 Sep 202300:00
–cnnvd
cvelist
Cvelist
CVE-2023-5147 D-Link DAR-7000 updateos.php unrestricted upload
25 Sep 202300:31
–cvelist
euvd
EUVD
EUVD-2023-57485
3 Oct 202520:07
–euvd
nvd
NVD
CVE-2023-5147
25 Sep 202301:15
–nvd
osv_cve
osv_cve
CVE-2023-5147
25 Sep 202301:15
–osv_cve
prion
Prion
Design/Logic Flaw
25 Sep 202301:15
–prion
ptsecurity
Positive Technologies
PT-2023-5605 · D Link · D-Link Dar-7000
24 Sep 202300:00
–ptsecurity
rapid7
Rapid7 Vulnerability Database (full)
CVE-2023-5147: Unrestricted Upload of File with Dangerous Type
25 Sep 202300:00
–rapid7
redhatcve
RedhatCVE
CVE-2023-5147
23 May 202504:30
–redhatcve
Rows per page
NVD
Vulners
Vulnrichment
Node
AND
dlinkdar-7000_firmwareRange≤2015-12-31
[
  {
    "vendor": "D-Link",
    "product": "DAR-7000",
    "versions": [
      {
        "version": "20151231",
        "status": "affected"
      }
    ]
  }
]
ParameterPositionPathDescriptionCWE
1_file_uploadrequest body/sysmanage/updateos.phpUnrestricted file upload vulnerability via parameter 1_file_upload in /sysmanage/updateos.php, enabling remote attack.CWE-434

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

17 Jun 2026 06:47Current
6.3Medium risk
Vulners AI Score6.3
CVSS 3.16.3 - 8.8
CVSS 36.3
CVSS 26.5
EPSS0.26443
SSVC
146