722 matches found
Sql injection
A vulnerability has been found in D-Link DAR-7000 up to 20231126 and classified as critical. This vulnerability affects unknown code of the file /user/inc/workidajax.php. The manipulation of the argument id leads to sql injection. The exploit has been disclosed to the public and may be used...
CVE-2023-6581
Summary of CVE-2023-6581 (D-Link DAR-7000) : A SQL injection vulnerability exists in/D-Link DAR-7000 up to 20231126, triggered by manipulating the id parameter in the file /user/inc/workidajax.php. The issue is associated with remote exploitation and an exploit has been disclosed publicly. Public...
D-Link DAR-7000 SQL注入漏洞
DAR-7000 is an Internet Behavior Audit Gateway from AUO Electronic Devices Shanghai Co. AUO DAR-7000 suffers from a SQL injection vulnerability, which originates from the lack of validation of the parameter id of the file /user/inc/workidajax.php for externally entered SQL statements. The...
PT-2023-7504 · D Link · D-Link Dar-7000
Name of the Vulnerable Software and Affected Versions: D-Link DAR-7000 up to 20231126 Description: A critical vulnerability has been found in the D-Link DAR-7000, affecting the file /user/inc/workidajax.php. The issue is related to the lack of protection against SQL injection when handling the id...
Rocky Linux 8 : java-17-openjdk (RLSA-2022:7000)
The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2022:7000 advisory. - Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JGSS. Supported versions that are affected...
The vulnerability of the sysmanage/licence.php component in D-Link’s DAR-7000 and DAR-8000 router microprogramming systems lies in the lack of restrictions on file downloads. This allows a malicious individual to download arbitrary files.
The vulnerability of the sysmanage/licence.php component in D-Link DAR-7000 and DAR-8000 router microprogramming systems lies in the lack of restrictions on file downloads. Exploiting this vulnerability allows a malicious actor to download any files at will...
The vulnerability of the /sysmanage/edit_manageadmin.php component in the DAR-7000 router microprogramming system allows a attacker to execute arbitrary SQL code.
The vulnerability of the /sysmanage/editmanageadmin.php component in the DAR-7000 router microprogramming system is related to the lack of validation for the sequence of XML objects. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL code remotely...
CVE-2023-42406
SQL injection vulnerability in D-Link Online behavior audit gateway DAR-7000 V31R02B1413C allows a remote attacker to obtain sensitive information and execute arbitrary code via the editrole.php component...
Sql injection
SQL injection vulnerability in D-Link Online behavior audit gateway DAR-7000 V31R02B1413C allows a remote attacker to obtain sensitive information and execute arbitrary code via the editrole.php component...
PT-2023-6898 · D Link · D-Link Dar-7000
Name of the Vulnerable Software and Affected Versions: D-Link DAR-7000 version V31R02B1413C Description: The issue is related to a SQL injection vulnerability in the editrole.php component, which can be exploited by a remote attacker to obtain sensitive information and execute arbitrary code. Thi...
D-Link DAR-7000 SQL Injection Vulnerability
D-Link DAR-7000 is an Internet Behavior Audit Gateway from China AUO D-Link. The D-Link DAR-7000 V31R02B1413C suffers from a SQL injection vulnerability, which can be exploited by a remote attacker to obtain sensitive information and execute arbitrary code via the editrole.php component...
CVE-2023-42406
CVE-2023-42406 affects D-Link DAR-7000 Online Behavior Audit Gateway (V31R02B1413C). The vulnerability is an SQL injection in the editrole.php component that allows a remote attacker to obtain sensitive information and execute arbitrary code. CVSS-3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/...
The vulnerability of the /log/mailrecvview.php file in the D-Link DAR-7000 router microprogramming system allows a hacker to execute arbitrary SQL code.
The vulnerability of the /log/mailrecvview.php file in the D-Link DAR-7000 router microprogramming system is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL code remotely...
The vulnerability of the /importexport.php file in the D-Link DAR-7000 router microprogramming system allows a hacker to execute arbitrary SQL code.
The vulnerability of the /importexport.php file in the D-Link DAR-7000 router microprogramming system is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL code remotely...
D-Link DAR-7000 mailrecvview.php File SQL Injection Vulnerability
D-Link DAR-7000 is an Internet Behavior Audit Gateway from China AUO D-Link. A SQL injection vulnerability exists in the D-Link DAR-7000 mailrecvview.php file, which can be exploited by attackers to execute illegal SQL commands to steal sensitive database data...
D-Link DAR-7000 importexport.php file SQL injection vulnerability
D-Link DAR-7000 is an Internet Behavior Audit Gateway from China AUO D-Link. A SQL injection vulnerability exists in the D-Link DAR-7000 importexport.php file. An attacker can exploit this vulnerability to execute illegal SQL commands to steal sensitive database data...
CVE-2023-44693
D-Link Online behavior audit gateway DAR-7000 V31R02B1413C is vulnerable to SQL Injection via /importexport.php...
CVE-2023-44694
D-Link Online behavior audit gateway DAR-7000 V31R02B1413C is vulnerable to SQL Injection via /log/mailrecvview.php...
