The vulnerability of the /autheditpwd.php script in the D-Link DAR-8000 router microprogramming system, allowing a hacker to execute arbitrary commands.

The vulnerability of the /autheditpwd.php script in the D-Link DAR-8000 router microprogramming system is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker to execute arbitrary commands remotely...

D-Link DAR-8000 SQL Injection Vulnerability

D-Link DAR-8000 is an Internet Behavior Audit Gateway from China Youxun D-Link. SQL injection vulnerability exists in D-Link DAR-8000 20151231 and earlier versions, which originates from an SQL injection vulnerability in the parameter hidid in the file /autheditpwd.php...