Sql injection

2023-10-2622:15:00

PRIOn knowledge base

www.prio-n.com

sql injection

d-link online behavior audit gateway

dar-7000

remote code execution

editrole.php

9.6 High

AI Score

Confidence

High

0.007 Low

EPSS

Percentile

80.1%

JSON

SQL injection vulnerability in D-Link Online behavior audit gateway DAR-7000 V31R02B1413C allows a remote attacker to obtain sensitive information and execute arbitrary code via the editrole.php component.

CPENameOperatorVersion
dar-7000_firmwareeq31.0.0-r2-b1413-c

CPE	Name	Operator	Version
	dar-7000_firmware	eq	31.0.0-r2-b1413-c

References

github.com/1dreamGN/CVE/blob/main/CVE-2023-42406.md

github.com/flyyue2001/cve/blob/main/D-LINK%20-DAR-7000_sql_:sysmanage:editrole.php.md