Lucene search
+L

328 matches found

NVD
NVD
•added 2023/10/01 5:15 a.m.•32 views

CVE-2023-5322

UNSUPPORTED WHEN ASSIGNED A vulnerability was found in D-Link DAR-7000 up to 20151231. It has been rated as critical. Affected by this issue is some unknown functionality of the file /sysmanage/editmanageadmin.php. The manipulation of the argument id leads to sql injection. The attack may be...

8.8CVSS6.1AI score0.1666EPSS
SaveExploits1References4
Prion
Prion
•added 2023/10/01 5:15 a.m.•34 views

Sql injection

UNSUPPORTED WHEN ASSIGNED A vulnerability was found in D-Link DAR-7000 up to 20151231. It has been rated as critical. Affected by this issue is some unknown functionality of the file /sysmanage/editmanageadmin.php. The manipulation of the argument id leads to sql injection. The attack may be...

5.8CVSS8.8AI score0.1666EPSS
SaveExploits1References4Affected Software1
Vulnrichment
Vulnrichment
•added 2023/10/01 4:31 a.m.•17 views

CVE-2023-5322 D-Link DAR-7000 edit_manageadmin.php sql injection

UNSUPPORTED WHEN ASSIGNED A vulnerability was found in D-Link DAR-7000 up to 20151231. It has been rated as critical. Affected by this issue is some unknown functionality of the file /sysmanage/editmanageadmin.php. The manipulation of the argument id leads to sql injection. The attack may be...

5.8CVSS8.8AI score0.1666EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2023/10/01 4:31 a.m.•49 views

CVE-2023-5322 D-Link DAR-7000 edit_manageadmin.php sql injection

UNSUPPORTED WHEN ASSIGNED A vulnerability was found in D-Link DAR-7000 up to 20151231. It has been rated as critical. Affected by this issue is some unknown functionality of the file /sysmanage/editmanageadmin.php. The manipulation of the argument id leads to sql injection. The attack may be...

5.8CVSS9AI score0.1666EPSS
SaveExploits1References4
CVE
CVE
•added 2023/10/01 4:31 a.m.•79 views

CVE-2023-5322

The CVE-2023-5322 entry concerns D-Link DAR-7000 firmware versions up to 20151231. The vulnerability is a SQL injection in the /sysmanage/edit_manageadmin.php functionality, caused by unsafely handling the id parameter. It can be exploited remotely, potentially compromising confidentiality, integ...

8.8CVSS5.7AI score0.1666EPSS
SaveExploits1References4Affected Software1
CNNVD
CNNVD
•added 2023/10/01 12:00 a.m.•16 views

D-Link DAR-7000 SQL Injection Vulnerability

D-Link DAR-7000 is an Internet behavior auditing gateway from China AUO D-Link. A SQL injection vulnerability exists in the D-Link DAR-7000 version 20151231 and earlier versions, which stems from the fact that incorrect manipulation of the parameter id can lead to sql injection...

8.8CVSS8.3AI score0.1666EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/10/01 12:00 a.m.•4 views

CVE-2023-5322: Improper Neutralization of Special Elements used in an SQL Command

UNSUPPORTED WHEN ASSIGNED A vulnerability was found in D-Link DAR-7000 up to 20151231. It has been rated as critical. Affected by this issue is some unknown functionality of the file /sysmanage/editmanageadmin.php. The manipulation of the argument id leads to sql injection. The attack may be...

8.8CVSS5.7AI score0.1666EPSS
SaveExploits1References2
NVD
NVD
•added 2023/09/25 3:15 a.m.•27 views

CVE-2023-5154

UNSUPPORTED WHEN ASSIGNED A vulnerability has been found in D-Link DAR-8000 up to 20151231 and classified as critical. This vulnerability affects unknown code of the file /sysmanage/changelogo.php. The manipulation of the argument fileupload leads to unrestricted upload. The attack can be initiat...

8.8CVSS7.2AI score0.15294EPSS
SaveExploits0References4
OSV
OSV
•added 2023/09/25 3:15 a.m.•26 views

CVE-2023-5154

UNSUPPORTED WHEN ASSIGNED A vulnerability has been found in D-Link DAR-8000 up to 20151231 and classified as critical. This vulnerability affects unknown code of the file /sysmanage/changelogo.php. The manipulation of the argument fileupload leads to unrestricted upload. The attack can be initiat...

8.8CVSS5.5AI score0.15294EPSS
SaveExploits0References4
OSV
OSV
•added 2023/09/25 3:15 a.m.•16 views

CVE-2023-5153

UNSUPPORTED WHEN ASSIGNED A vulnerability, which was classified as critical, was found in D-Link DAR-8000 up to 20151231. This affects an unknown part of the file /Tool/querysql.php. The manipulation leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

6.5CVSS5.5AI score0.01665EPSS
SaveExploits1References4
Prion
Prion
•added 2023/09/25 3:15 a.m.•31 views

Out-of-bounds

UNSUPPORTED WHEN ASSIGNED A vulnerability has been found in D-Link DAR-8000 up to 20151231 and classified as critical. This vulnerability affects unknown code of the file /sysmanage/changelogo.php. The manipulation of the argument fileupload leads to unrestricted upload. The attack can be initiat...

6.5CVSS8.8AI score0.15294EPSS
SaveExploits0References4Affected Software1
Prion
Prion
•added 2023/09/25 3:15 a.m.•27 views

Sql injection

UNSUPPORTED WHEN ASSIGNED A vulnerability, which was classified as critical, was found in D-Link DAR-8000 up to 20151231. This affects an unknown part of the file /Tool/querysql.php. The manipulation leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

6.5CVSS6.9AI score0.01665EPSS
SaveExploits1References4Affected Software1
Vulnrichment
Vulnrichment
•added 2023/09/25 3:00 a.m.•26 views

CVE-2023-5154 D-Link DAR-8000 changelogo.php unrestricted upload

UNSUPPORTED WHEN ASSIGNED A vulnerability has been found in D-Link DAR-8000 up to 20151231 and classified as critical. This vulnerability affects unknown code of the file /sysmanage/changelogo.php. The manipulation of the argument fileupload leads to unrestricted upload. The attack can be initiat...

6.5CVSS7.1AI score0.15294EPSS
SaveExploits0References4
CVE
CVE
•added 2023/09/25 3:00 a.m.•152 views

CVE-2023-5154

The CVE-2023-5154 issue affects D-Link DAR-8000 up to 20151231, in /sysmanage/changelogo.php where manipulating the file_upload parameter enables unrestricted file uploads. This is a remote, unauthenticated-facing risk with potential code/command execution, reportedly disclosed publicly. The affe...

8.8CVSS6.3AI score0.15294EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
•added 2023/09/25 3:00 a.m.•36 views

CVE-2023-5154 D-Link DAR-8000 changelogo.php unrestricted upload

UNSUPPORTED WHEN ASSIGNED A vulnerability has been found in D-Link DAR-8000 up to 20151231 and classified as critical. This vulnerability affects unknown code of the file /sysmanage/changelogo.php. The manipulation of the argument fileupload leads to unrestricted upload. The attack can be initiat...

6.5CVSS9AI score0.15294EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2023/09/25 2:31 a.m.•27 views

CVE-2023-5153 D-Link DAR-8000 querysql.php sql injection

UNSUPPORTED WHEN ASSIGNED A vulnerability, which was classified as critical, was found in D-Link DAR-8000 up to 20151231. This affects an unknown part of the file /Tool/querysql.php. The manipulation leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

6.5CVSS7.3AI score0.01665EPSS
SaveExploits1References4
CVE
CVE
•added 2023/09/25 2:31 a.m.•158 views

CVE-2023-5153

CVE-2023-5153 concerns the D-Link DAR-8000, affected up to 20151231. The vulnerability targets an unknown part of the file /Tool/querysql.php, enabling an SQL injection that can be triggered remotely. Public exploits and disclosures exist. Multiple sources confirm the product is End-of-Life and n...

6.5CVSS6.2AI score0.01665EPSS
SaveExploits1References4Affected Software1
Cvelist
Cvelist
•added 2023/09/25 2:31 a.m.•40 views

CVE-2023-5153 D-Link DAR-8000 querysql.php sql injection

UNSUPPORTED WHEN ASSIGNED A vulnerability, which was classified as critical, was found in D-Link DAR-8000 up to 20151231. This affects an unknown part of the file /Tool/querysql.php. The manipulation leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

6.5CVSS7.1AI score0.01665EPSS
SaveExploits1References4
NVD
NVD
•added 2023/09/25 2:15 a.m.•26 views

CVE-2023-5151

UNSUPPORTED WHEN ASSIGNED A vulnerability classified as critical was found in D-Link DAR-8000 up to 20151231. Affected by this vulnerability is an unknown functionality of the file /autheditpwd.php. The manipulation of the argument hidid leads to sql injection. The attack can be launched remotely...

8.8CVSS7.4AI score0.80571EPSS
SaveExploits1References4
NVD
NVD
•added 2023/09/25 2:15 a.m.•30 views

CVE-2023-5152

UNSUPPORTED WHEN ASSIGNED A vulnerability, which was classified as critical, has been found in D-Link DAR-7000 and DAR-8000 up to 20151231. Affected by this issue is some unknown functionality of the file /importexport.php. The manipulation of the argument sql leads to sql injection. The attack m...

6.5CVSS6.7AI score0.08463EPSS
SaveExploits1References4
Rows per page
Query Builder