SQL Injection Vulnerability in D-link Central WifiManager Ra***.php Page

D-Link Central WiFiManager is D-Link centralized wireless management software. A SQL injection vulnerability exists in the D-link Central WifiManager Ra.php page, which can be exploited by an attacker to obtain sensitive information from the database...

CVE-2018-17440

An issue was discovered on D-Link Central WiFi Manager before v 1.03r0100-Beta1. They expose an FTP server that serves by default on port 9000 and has hardcoded credentials admin, admin. Taking advantage of this, a remote unauthenticated attacker could execute arbitrary PHP code by uploading any...