The vulnerability in the /model/__lang_msg.php microprogramming software of the D-LINK DIR-300 router allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the /model/langmsg.php microprogrammed software in D-LINK DIR-300 routers is related to incorrect external control of file names or files. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected...

CVE-2023-31814

D-Link DIR-300 firmware =REVA1.06 and =REVB2.06 is vulnerable to File inclusion via /model/langmsg.php...

CVE-2023-31814

D-Link DIR-300 firmware =REVA1.06 and =REVB2.06 is vulnerable to File inclusion via /model/langmsg.php...

CVE-2023-31814

D-Link DIR-300 firmware =REVA1.06 and =REVB2.06 is vulnerable to File inclusion via /model/langmsg.php...

Design/Logic Flaw

D-Link DIR-300 firmware =REVA1.06 and =REVB2.06 is vulnerable to File inclusion via /model/langmsg.php...

CVE-2023-31814

D-Link DIR-300 firmware =REVA1.06 and =REVB2.06 is vulnerable to File inclusion via /model/langmsg.php...

CVE-2023-31814: Use of Incorrectly-Resolved Name or Reference

D-Link DIR-300 firmware =REVA1.06 and =REVB2.06 is vulnerable to File inclusion via /model/langmsg.php...

D-Link DIR-300 安全漏洞

The D-Link DIR-300 is a wireless router from China's AUO D-Link. A security vulnerability exists in the D-Link DIR-300 REVA1.06 and earlier firmware versions, REVB2.06 and earlier firmware versions, which originates from an easy file inclusion attack via /model/langmsg.php...

CVE-2023-31814

D-Link DIR-300 firmware =REVA1.06 and =REVB2.06 is vulnerable to File inclusion via /model/langmsg.php...

CVE-2023-31814

The CVE-2023-31814 entry concerns D-Link DIR-300 firmware and is tied to a file inclusion vulnerability in the script /model/__lang_msg.php. Affected devices are DIR-300 firmware versions <=REVA1.06 and

PT-2023-2981 · D Link · D-Link Dir-300

Name of the Vulnerable Software and Affected Versions: D-Link DIR-300 firmware versions =REVA1.06 and =REVB2.06 Description: The issue is related to incorrect external control of a file name or path in the /model/ lang msg.php script of the D-Link DIR-300 router's firmware. This can be exploited ...

D-Link DIR-300 Router Cleartext Storage of a Password Vulnerability

The D-Link DIR-300 router stores cleartext passwords, which allows context-dependent attackers to obtain sensitive information...

CVE-2013-7471

A Command Injection vulnerability exists in the soap.cgi?service=WANIPConn1 URL on several D-Link devices, including DIR-845 (before v1.02b03), DIR-600 (before v2.17b01), DIR-645 (before v1.04b11), DIR-300 (rev. B), and DIR-865 . The root cause is the improper filtering of shell metacharacters wi...

CVE-2013-7471: Improper Neutralization of Special Elements used in a Command

An issue was discovered in soap.cgi?service=WANIPConn1 on D-Link DIR-845 before v1.02b03, DIR-600 before v2.17b01, DIR-645 before v1.04b11, DIR-300 rev. B, and DIR-865 devices. There is Command Injection via shell metacharacters in the NewInternalClient, NewExternalPort, or NewInternalPort elemen...

D-Link DIR-300 Cross-Site Request Forgery Vulnerability

The D-Link DIR-300 is a wireless router device. A cross-site request forgery vulnerability exists in the D-Link DIR-300, which can be exploited by an attacker to perform an unauthorized operation, open remote access and save settings...

VulnCheck KEV: CVE-2011-4723

The D-Link DIR-300 router stores cleartext passwords, which allows context-dependent attackers to obtain sensitive information...

File Containment Vulnerability in D-Link DIR-300 Router

D-Link DIR-300 is a wireless router product from AUO D-Link. A file inclusion vulnerability exists in the D-Link DIR-300 router, which can be exploited by attackers to obtain sensitive information...

CVE-2013-10050

creationtimestamp| type| source ---|---|--- 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/dlinkdir300exectelnet.rb 2025-10-23 21:12:57+00:00| seen| MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7 2026-09-08 06:48:30+00:00| seen|...

D-Link DIR-600/300 Router Unauthenticated Remote Command Execution

A remote code execution vulnerability exists in D-Link DIR-600, DIR-300 routers. A remote attacker can exploit this weakness to execute arbitrary code in the affected router via a crafted request...

RouterSploit - Router Exploitation Framework

The RouteSploit Framework is an open-source exploitation framework dedicated to embedded devices. It consists of various modules that aids penetration testing operations: exploits - modules that take advantage of identified vulnerabilities creds - modules designed to test credentials against...