CVE-2023-5145

CVE-2023-5145 concerns D-Link DAR-7000 (up to 20151231) and relates to the sysmanage/licence.php endpoint. The vulnerability arises from improper handling of the file_upload argument, enabling unrestricted remote uploads. Public disclosure is noted in multiple sources, and the product is describe...

CVE-2023-5145 D-Link DAR-7000 licence.php unrestricted upload

UNSUPPORTED WHEN ASSIGNED A vulnerability has been found in D-Link DAR-7000 up to 20151231 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /sysmanage/licence.php. The manipulation of the argument fileupload leads to unrestricted upload. The attac...