Design/Logic Flaw

UNSUPPORTED WHEN ASSIGNED A vulnerability was found in D-Link DAR-7000 up to 20151231. It has been classified as critical. This affects an unknown part of the file /sysmanage/updateos.php. The manipulation of the argument 1fileupload leads to unrestricted upload. It is possible to initiate the...

CVE-2023-5149 D-Link DAR-7000 userattestation.php unrestricted upload

UNSUPPORTED WHEN ASSIGNED A vulnerability was found in D-Link DAR-7000 up to 20151231. It has been rated as critical. This issue affects some unknown processing of the file /useratte/userattestation.php. The manipulation of the argument webimg leads to unrestricted upload. The attack may be...

CVE-2023-5149

The CVE-2023-5149 entry concerns D-Link DAR-7000 (up to 20151231) with a vulnerability in /useratte/userattestation.php. The issue allows unrestricted file upload by manipulating the web_img argument and can be exploited remotely; public exploits have been disclosed. The product is end-of-life an...

CVE-2023-5148 D-Link DAR-7000/DAR-8000 uploadfile.php unrestricted upload

UNSUPPORTED WHEN ASSIGNED A vulnerability was found in D-Link DAR-7000 and DAR-8000 up to 20151231. It has been declared as critical. This vulnerability affects unknown code of the file /Tool/uploadfile.php. The manipulation of the argument fileupload leads to unrestricted upload. The attack can ...

CVE-2023-5148

CVE-2023-5148 affects D-Link DAR-7000 and DAR-8000 (up to 20151231) with a vulnerability in the file /Tool/uploadfile.php. The issue arises from manipulation of the file_upload argument, enabling unrestricted upload and remote initiation. Multiple sources (NVD/NVD-derived entries, Vulns enrichmen...

CVE-2023-5147 D-Link DAR-7000 updateos.php unrestricted upload

UNSUPPORTED WHEN ASSIGNED A vulnerability was found in D-Link DAR-7000 up to 20151231. It has been classified as critical. This affects an unknown part of the file /sysmanage/updateos.php. The manipulation of the argument 1fileupload leads to unrestricted upload. It is possible to initiate the...

CVE-2023-5147 D-Link DAR-7000 updateos.php unrestricted upload

UNSUPPORTED WHEN ASSIGNED A vulnerability was found in D-Link DAR-7000 up to 20151231. It has been classified as critical. This affects an unknown part of the file /sysmanage/updateos.php. The manipulation of the argument 1fileupload leads to unrestricted upload. It is possible to initiate the...

CVE-2023-5147

CVE-2023-5147 affects D-Link DAR-7000 firmware up to 2015-12-31. The vulnerability resides in the /sysmanage/updateos.php file where manipulation of the argument 1_file_upload leads to an unrestricted file upload, enabling a remote attack. The issue is documented as critical and is tied to device...

CVE-2023-5146

UNSUPPORTED WHEN ASSIGNED A vulnerability was found in D-Link DAR-7000 and DAR-8000 up to 20151231 and classified as critical. Affected by this issue is some unknown functionality of the file /sysmanage/updatelib.php. The manipulation of the argument fileupload leads to unrestricted upload. The...

CVE-2023-5146

UNSUPPORTED WHEN ASSIGNED A vulnerability was found in D-Link DAR-7000 and DAR-8000 up to 20151231 and classified as critical. Affected by this issue is some unknown functionality of the file /sysmanage/updatelib.php. The manipulation of the argument fileupload leads to unrestricted upload. The...

CVE-2023-5145

UNSUPPORTED WHEN ASSIGNED A vulnerability has been found in D-Link DAR-7000 up to 20151231 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /sysmanage/licence.php. The manipulation of the argument fileupload leads to unrestricted upload. The attac...

CVE-2023-5145

UNSUPPORTED WHEN ASSIGNED A vulnerability has been found in D-Link DAR-7000 up to 20151231 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /sysmanage/licence.php. The manipulation of the argument fileupload leads to unrestricted upload. The attac...

Out-of-bounds

UNSUPPORTED WHEN ASSIGNED A vulnerability was found in D-Link DAR-7000 and DAR-8000 up to 20151231 and classified as critical. Affected by this issue is some unknown functionality of the file /sysmanage/updatelib.php. The manipulation of the argument fileupload leads to unrestricted upload. The...

Out-of-bounds

UNSUPPORTED WHEN ASSIGNED A vulnerability has been found in D-Link DAR-7000 up to 20151231 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /sysmanage/licence.php. The manipulation of the argument fileupload leads to unrestricted upload. The attac...

CVE-2023-5146 D-Link DAR-7000/DAR-8000 updatelib.php unrestricted upload

UNSUPPORTED WHEN ASSIGNED A vulnerability was found in D-Link DAR-7000 and DAR-8000 up to 20151231 and classified as critical. Affected by this issue is some unknown functionality of the file /sysmanage/updatelib.php. The manipulation of the argument fileupload leads to unrestricted upload. The...

CVE-2023-5146

CVE-2023-5146 affects D-Link DAR-7000 and DAR-8000 (versions up to 20151231). The vulnerability resides in the /sysmanage/updatelib.php endpoint, where manipulation of the file_upload parameter enables unrestricted file upload, potentially allowing remote command execution. The affected devices a...

CVE-2023-5146 D-Link DAR-7000/DAR-8000 updatelib.php unrestricted upload

UNSUPPORTED WHEN ASSIGNED A vulnerability was found in D-Link DAR-7000 and DAR-8000 up to 20151231 and classified as critical. Affected by this issue is some unknown functionality of the file /sysmanage/updatelib.php. The manipulation of the argument fileupload leads to unrestricted upload. The...

CVE-2023-5150: Unrestricted Upload of File with Dangerous Type

UNSUPPORTED WHEN ASSIGNED A vulnerability classified as critical has been found in D-Link DAR-7000 and DAR-8000 up to 20151231. Affected is an unknown function of the file /useratte/web.php. The manipulation of the argument fileupload leads to unrestricted upload. It is possible to launch the...

D-Link DAR-7000 SQL Injection Vulnerability

D-Link DAR-7000 is an Internet behavior auditing gateway from China Youxun D-Link. SQL injection vulnerability exists in D-Link DAR-7000 20151231 and earlier versions, which originates from a SQL injection vulnerability in the parameter sql of the file /importexport...

CVE-2023-5152: Improper Neutralization of Special Elements used in an SQL Command

UNSUPPORTED WHEN ASSIGNED A vulnerability, which was classified as critical, has been found in D-Link DAR-7000 and DAR-8000 up to 20151231. Affected by this issue is some unknown functionality of the file /importexport.php. The manipulation of the argument sql leads to sql injection. The attack m...