CVE-2024-4962

CVE-2024-4962 affects D-Link DAR-7000-40 (V31R02B1413C). A vulnerability in /useratte/resmanage.php allows unrestricted upload by manipulating the file parameter, potentially exploitable remotely. Exploit details are corroborated by multiple sources (NVD entry and PT-2024-3695). The affected prod...

CVE-2024-4965: Improper Neutralization of Special Elements used in an OS Command

UNSUPPORTED WHEN ASSIGNED A vulnerability was found in D-Link DAR-7000-40 V31R02B1413C and classified as critical. This issue affects some unknown processing of the file /useratte/resmanage.php. The manipulation of the argument load leads to os command injection. The attack may be initiated...