The vulnerability of the /autheditpwd.php script in the D-Link DAR-8000 router microprogramming system, allowing a hacker to execute arbitrary commands.

The vulnerability of the /autheditpwd.php script in the D-Link DAR-8000 router microprogramming system is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker to execute arbitrary commands remotely...

CVE-2023-5322

UNSUPPORTED WHEN ASSIGNED A vulnerability was found in D-Link DAR-7000 up to 20151231. It has been rated as critical. Affected by this issue is some unknown functionality of the file /sysmanage/editmanageadmin.php. The manipulation of the argument id leads to sql injection. The attack may be...

CVE-2023-5322

UNSUPPORTED WHEN ASSIGNED A vulnerability was found in D-Link DAR-7000 up to 20151231. It has been rated as critical. Affected by this issue is some unknown functionality of the file /sysmanage/editmanageadmin.php. The manipulation of the argument id leads to sql injection. The attack may be...

Sql injection

UNSUPPORTED WHEN ASSIGNED A vulnerability was found in D-Link DAR-7000 up to 20151231. It has been rated as critical. Affected by this issue is some unknown functionality of the file /sysmanage/editmanageadmin.php. The manipulation of the argument id leads to sql injection. The attack may be...

CVE-2023-5322 D-Link DAR-7000 edit_manageadmin.php sql injection

UNSUPPORTED WHEN ASSIGNED A vulnerability was found in D-Link DAR-7000 up to 20151231. It has been rated as critical. Affected by this issue is some unknown functionality of the file /sysmanage/editmanageadmin.php. The manipulation of the argument id leads to sql injection. The attack may be...

CVE-2023-5322

The CVE-2023-5322 entry concerns D-Link DAR-7000 firmware versions up to 20151231. The vulnerability is a SQL injection in the /sysmanage/edit_manageadmin.php functionality, caused by unsafely handling the id parameter. It can be exploited remotely, potentially compromising confidentiality, integ...

CVE-2023-5322 D-Link DAR-7000 edit_manageadmin.php sql injection

UNSUPPORTED WHEN ASSIGNED A vulnerability was found in D-Link DAR-7000 up to 20151231. It has been rated as critical. Affected by this issue is some unknown functionality of the file /sysmanage/editmanageadmin.php. The manipulation of the argument id leads to sql injection. The attack may be...

CVE-2023-5322: Improper Neutralization of Special Elements used in an SQL Command

UNSUPPORTED WHEN ASSIGNED A vulnerability was found in D-Link DAR-7000 up to 20151231. It has been rated as critical. Affected by this issue is some unknown functionality of the file /sysmanage/editmanageadmin.php. The manipulation of the argument id leads to sql injection. The attack may be...

D-Link DAR-7000 SQL Injection Vulnerability

D-Link DAR-7000 is an Internet behavior auditing gateway from China AUO D-Link. A SQL injection vulnerability exists in the D-Link DAR-7000 version 20151231 and earlier versions, which stems from the fact that incorrect manipulation of the parameter id can lead to sql injection...

CVE-2023-5153

UNSUPPORTED WHEN ASSIGNED A vulnerability, which was classified as critical, was found in D-Link DAR-8000 up to 20151231. This affects an unknown part of the file /Tool/querysql.php. The manipulation leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

CVE-2023-5154

UNSUPPORTED WHEN ASSIGNED A vulnerability has been found in D-Link DAR-8000 up to 20151231 and classified as critical. This vulnerability affects unknown code of the file /sysmanage/changelogo.php. The manipulation of the argument fileupload leads to unrestricted upload. The attack can be initiat...

CVE-2023-5154

UNSUPPORTED WHEN ASSIGNED A vulnerability has been found in D-Link DAR-8000 up to 20151231 and classified as critical. This vulnerability affects unknown code of the file /sysmanage/changelogo.php. The manipulation of the argument fileupload leads to unrestricted upload. The attack can be initiat...

Sql injection

UNSUPPORTED WHEN ASSIGNED A vulnerability, which was classified as critical, was found in D-Link DAR-8000 up to 20151231. This affects an unknown part of the file /Tool/querysql.php. The manipulation leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

Out-of-bounds

UNSUPPORTED WHEN ASSIGNED A vulnerability has been found in D-Link DAR-8000 up to 20151231 and classified as critical. This vulnerability affects unknown code of the file /sysmanage/changelogo.php. The manipulation of the argument fileupload leads to unrestricted upload. The attack can be initiat...

CVE-2023-5154 D-Link DAR-8000 changelogo.php unrestricted upload

UNSUPPORTED WHEN ASSIGNED A vulnerability has been found in D-Link DAR-8000 up to 20151231 and classified as critical. This vulnerability affects unknown code of the file /sysmanage/changelogo.php. The manipulation of the argument fileupload leads to unrestricted upload. The attack can be initiat...

CVE-2023-5154 D-Link DAR-8000 changelogo.php unrestricted upload

UNSUPPORTED WHEN ASSIGNED A vulnerability has been found in D-Link DAR-8000 up to 20151231 and classified as critical. This vulnerability affects unknown code of the file /sysmanage/changelogo.php. The manipulation of the argument fileupload leads to unrestricted upload. The attack can be initiat...

CVE-2023-5154

The CVE-2023-5154 issue affects D-Link DAR-8000 up to 20151231, in /sysmanage/changelogo.php where manipulating the file_upload parameter enables unrestricted file uploads. This is a remote, unauthenticated-facing risk with potential code/command execution, reportedly disclosed publicly. The affe...

CVE-2023-5153 D-Link DAR-8000 querysql.php sql injection

UNSUPPORTED WHEN ASSIGNED A vulnerability, which was classified as critical, was found in D-Link DAR-8000 up to 20151231. This affects an unknown part of the file /Tool/querysql.php. The manipulation leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

CVE-2023-5153

CVE-2023-5153 concerns the D-Link DAR-8000, affected up to 20151231. The vulnerability targets an unknown part of the file /Tool/querysql.php, enabling an SQL injection that can be triggered remotely. Public exploits and disclosures exist. Multiple sources confirm the product is End-of-Life and n...

CVE-2023-5153 D-Link DAR-8000 querysql.php sql injection

UNSUPPORTED WHEN ASSIGNED A vulnerability, which was classified as critical, was found in D-Link DAR-8000 up to 20151231. This affects an unknown part of the file /Tool/querysql.php. The manipulation leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...