CVE-2023-5151

CVE-2023-5151 describes a SQL injection in D-Link DAR-8000 firmware (versions up to 20151231) via the hid_id parameter in /autheditpwd.php. The issue enables remote exploitation and is associated with an end‑of‑life product. The public exploit is noted, and there is no confirmed fix in newer vers...