CVE-2023-5144

An advisory describes CVE-2023-5144 as a critical vulnerability in D-Link DAR-7000/DAR-8000 (up to 2015-12-31) affecting an unknown function in /sysmanage/updateos.php. Manipulating the file_upload parameter leads to unrestricted upload, enabling remote execution. The affected devices are end-of-...

CVE-2023-5144 D-Link DAR-7000/DAR-8000 updateos.php unrestricted upload

UNSUPPORTED WHEN ASSIGNED A vulnerability, which was classified as critical, was found in D-Link DAR-7000 and DAR-8000 up to 20151231. Affected is an unknown function of the file /sysmanage/updateos.php. The manipulation of the argument fileupload leads to unrestricted upload. It is possible to...

CVE-2023-5143

Affected product: D-Link DAR-7000 (up to 20151231). The issue resides in the handling of /log/webmailattach.php, where manipulating the table_name argument leads to a vulnerability. The incident is described as remotely exploitable with public disclosure of the exploit; the product is end-of-life...

CVE-2023-5143 D-Link DAR-7000 webmailattach.php Privilege Escalation

UNSUPPORTED WHEN ASSIGNED A vulnerability, which was classified as critical, has been found in D-Link DAR-7000 up to 20151231. This issue affects some unknown processing of the file /log/webmailattach.php. The manipulation of the argument tablename leads to an unknown weakness. The attack may be...

CVE-2023-5143 D-Link DAR-7000 webmailattach.php Privilege Escalation

UNSUPPORTED WHEN ASSIGNED A vulnerability, which was classified as critical, has been found in D-Link DAR-7000 up to 20151231. This issue affects some unknown processing of the file /log/webmailattach.php. The manipulation of the argument tablename leads to an unknown weakness. The attack may be...

PT-2023-5602 · D Link · D-Link Dar-8000

Name of the Vulnerable Software and Affected Versions: D-Link DAR-8000 versions up to 20151231 Description: The issue is related to an unrestricted file upload vulnerability in the /sysmanage/changelogo.php file of the D-Link DAR-8000 router's firmware. This vulnerability can be exploited remotel...

PT-2023-5609 · D Link · D-Link Dar-8000

Name of the Vulnerable Software and Affected Versions: D-Link DAR-8000 versions up to 20151231 Description: The issue is related to the lack of protection against SQL injection in the /autheditpwd.php script of the D-Link DAR-8000 router's firmware. This allows a remote attacker to execute...

PT-2023-5601 · D Link · D-Link Dar-8000 +1

Name of the Vulnerable Software and Affected Versions: D-Link DAR-7000 and DAR-8000 versions up to 20151231 Description: A critical issue has been found in the /importexport.php file, where the manipulation of the sql argument leads to sql injection. This allows an attacker to execute arbitrary...

CVE-2023-5143: Improper Input Validation

UNSUPPORTED WHEN ASSIGNED A vulnerability, which was classified as critical, has been found in D-Link DAR-7000 up to 20151231. This issue affects some unknown processing of the file /log/webmailattach.php. The manipulation of the argument tablename leads to an unknown weakness. The attack may be...

CVE-2023-5144: Unrestricted Upload of File with Dangerous Type

UNSUPPORTED WHEN ASSIGNED A vulnerability, which was classified as critical, was found in D-Link DAR-7000 and DAR-8000 up to 20151231. Affected is an unknown function of the file /sysmanage/updateos.php. The manipulation of the argument fileupload leads to unrestricted upload. It is possible to...

PT-2023-5608 · D Link · D-Link Dar-8000 +1

Name of the Vulnerable Software and Affected Versions: D-Link DAR-7000 versions up to 20151231 D-Link DAR-8000 versions up to 20151231 Description: The issue is related to an unrestricted file upload vulnerability in the /useratte/web.php file of the D-Link DAR-7000 and DAR-8000 routers. This...

D-Link DAR-7000 Code Issue Vulnerability

The D-Link DAR-7000 is an Internet Behavior Audit Gateway from China AUO D-Link. A code issue vulnerability exists in the D-Link DAR-7000. No information about this vulnerability is available at this time, please stay tuned to CNNVD or vendor announcements...

D-Link DAR-7000 Code Issue Vulnerability

The D-Link DAR-7000 is an Internet Behavior Audit Gateway from China AUO D-Link. A code issue vulnerability exists in the D-Link DAR-7000. No information about this vulnerability is available at this time, please stay tuned to CNNVD or vendor announcements...

CVE-2023-5145: Unrestricted Upload of File with Dangerous Type

UNSUPPORTED WHEN ASSIGNED A vulnerability has been found in D-Link DAR-7000 up to 20151231 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /sysmanage/licence.php. The manipulation of the argument fileupload leads to unrestricted upload. The attac...

PT-2023-6501 · D Link · D-Link Dar-8000 +1

Name of the Vulnerable Software and Affected Versions: D-Link DAR-7000 version up to 20151231 D-Link DAR-8000 affected versions not specified Description: A critical vulnerability has been found in the sysmanage/licence.php component of D-Link DAR-7000 and DAR-8000, related to the lack of...

D-Link DAR-7000 Code Issue Vulnerability

The D-Link DAR-7000 is an Internet Behavior Audit Gateway from China AUO D-Link. A code issue vulnerability exists in the D-Link DAR-7000. No information about this vulnerability is available at this time, please stay tuned to CNNVD or vendor announcements...

PT-2023-5603 · D Link · D-Link Dar-8000 +1

Name of the Vulnerable Software and Affected Versions: D-Link DAR-7000 versions up to 20151231 D-Link DAR-8000 versions up to 20151231 Description: The issue is related to an unrestricted file upload vulnerability in the /sysmanage/updatelib.php file of the D-Link DAR-7000 and DAR-8000 router...

D-Link DAR-7000 Security Breach

D-Link DAR-7000 is an Internet Behavior Audit Gateway from China AUO D-Link. A security vulnerability exists in D-Link DAR-7000. No information about this vulnerability is available at this time, please stay tuned to CNNVD or the vendor's announcement...

PT-2023-5606 · D Link · D-Link Dar-7000

Name of the Vulnerable Software and Affected Versions: D-Link DAR-7000 up to 20151231 Description: A critical issue affects the D-Link DAR-7000, related to the /useratte/userattestation.php file, allowing unrestricted upload through the manipulation of the web img argument. This can be exploited...

D-Link DAR-7000 Code Issue Vulnerability

The D-Link DAR-7000 is an Internet Behavior Audit Gateway from China AUO D-Link. A code issue vulnerability exists in the D-Link DAR-7000. No information about this vulnerability is available at this time, please stay tuned to CNNVD or vendor announcements...