Lucene search
+L

295 matches found

OSV
OSV
added 2023/10/17 6:15 a.m.5 views

CVE-2023-44693

D-Link Online behavior audit gateway DAR-7000 V31R02B1413C is vulnerable to SQL Injection via /importexport.php...

9.8CVSS5.8AI score
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2023/10/17 6:15 a.m.4 views

CVE-2023-44694

D-Link Online behavior audit gateway DAR-7000 V31R02B1413C is vulnerable to SQL Injection via /log/mailrecvview.php...

9.8CVSS6AI score0.00687EPSS
SaveExploits1References2
Prion
Prion
added 2023/10/17 6:15 a.m.20 views

Sql injection

D-Link Online behavior audit gateway DAR-7000 V31R02B1413C is vulnerable to SQL Injection via /log/mailrecvview.php...

7.5CVSS9.8AI score0.00687EPSS
SaveExploits1References1Affected Software1
Prion
Prion
added 2023/10/17 6:15 a.m.21 views

Sql injection

D-Link Online behavior audit gateway DAR-7000 V31R02B1413C is vulnerable to SQL Injection via /importexport.php...

7.5CVSS9.8AI score0.13279EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
added 2023/10/17 12:0 a.m.8 views

D-Link DAR-7000 SQL注入漏洞

D-Link DAR-7000 is an Internet Behavior Audit Gateway from China AUO D-Link. A SQL injection vulnerability exists in the D-Link DAR-7000 importexport.php file. An attacker can exploit this vulnerability to execute illegal SQL commands to steal sensitive database data...

9.8CVSS8.2AI score0.13279EPSS
SaveExploits1References2
CVE
CVE
added 2023/10/17 12:0 a.m.100 views

CVE-2023-44693

D-Link DAR-7000 Online Behavior Audit Gateway (model DAR-7000, version V31R02B1413C) is reported vulnerable to SQL injection via the importexport.php endpoint. The CVE-2023-44693 entry identifies the vulnerability as a SQL injection in importexport.php, with the impacted device exposing a high-se...

9.8CVSS9.8AI score0.13279EPSS
SaveExploits1References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/10/17 12:0 a.m.12 views

CVE-2023-44694

D-Link Online behavior audit gateway DAR-7000 V31R02B1413C is vulnerable to SQL Injection via /log/mailrecvview.php...

8AI score0.00687EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2023/10/17 12:0 a.m.6 views

D-Link DAR-7000 SQL注入漏洞

D-Link DAR-7000 is an Internet Behavior Audit Gateway from China AUO D-Link. A SQL injection vulnerability exists in the D-Link DAR-7000 mailrecvview.php file, which can be exploited by attackers to execute illegal SQL commands to steal sensitive database data...

9.8CVSS8.3AI score0.00687EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2023/10/17 12:0 a.m.27 views

CVE-2023-44693

D-Link Online behavior audit gateway DAR-7000 V31R02B1413C is vulnerable to SQL Injection via /importexport.php...

10AI score0.13279EPSS
SaveExploits1References1
CVE
CVE
added 2023/10/17 12:0 a.m.55 views

CVE-2023-44694

CVE-2023-44694 affects D-Link DAR-7000 Online Behavior Audit Gateway (DAR-7000) with SQL injection in /log/mailrecvview.php, specifically in version V31R02B1413C. Root cause is lack of protection against SQL query structure attacks in the mailrecvview.php endpoint, enabling arbitrary SQL executio...

9.8CVSS9.8AI score0.00687EPSS
SaveExploits1References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/10/17 12:0 a.m.22 views

CVE-2023-44693

D-Link Online behavior audit gateway DAR-7000 V31R02B1413C is vulnerable to SQL Injection via /importexport.php...

8AI score0.13279EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2023/10/16 12:0 a.m.6 views

PT-2023-6368 · D Link · D-Link Dar-7000

Name of the Vulnerable Software and Affected Versions: D-Link DAR-7000 version V31R02B1413C Description: The issue is related to a lack of protection against SQL query structure attacks in the /log/mailrecvview.php file of the D-Link DAR-7000 online behavior audit gateway. This can allow a remote...

9.8CVSS9.6AI score0.00687EPSS
SaveExploits1References7
BDU FSTEC
BDU FSTEC
added 2023/10/06 12:0 a.m.9 views

The vulnerability in the /sysmanage/updateos.php script of the DAR-7000 router’s microprogramming software allows a attacker to execute arbitrary commands.

The vulnerability in the /sysmanage/updateos.php script of the DAR-7000 router’s microprogramming system involves unlimited loading of dangerous files. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

9CVSS7.2AI score0.06014EPSS
SaveExploits1References6Affected Software2
BDU FSTEC
BDU FSTEC
added 2023/10/06 12:0 a.m.11 views

Vulnerability of the /log/webmailattach.php script in the DAR-7000 router microprogramming system, allowing attackers to execute arbitrary commands

The vulnerability of the /log/webmailattach.php script in the DAR-7000 router microprogramming system is related to the unlimited loading of dangerous files. Exploiting this vulnerability allows an attacker to execute arbitrary commands remotely...

10CVSS7.2AI score0.0361EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/10/03 12:0 a.m.8 views

The vulnerability in the /sysmanage/updatelib.php script of the D-Link DAR-8000 and DAR-7000 routers allows a hacker to execute arbitrary commands.

The vulnerability in the /sysmanage/updatelib.php script of the D-Link DAR-8000 and DAR-7000 routers stems from the ability to download files of a malicious nature without limitation. Exploiting this vulnerability could allow an attacker to execute arbitrary commands remotely...

6.5CVSS7.1AI score0.32915EPSS
SaveExploits1References5Affected Software2
BDU FSTEC
BDU FSTEC
added 2023/10/03 12:0 a.m.7 views

The vulnerability in the script /Tool/querysql.php of the D-Link DAR-8000 router software, which allows a hacker to execute arbitrary commands.

The vulnerability in the D-Link DAR-8000 router’s microprogramming software, implemented in the /Tool/querysql.php script, relates to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker to execute arbitrary commands remotely...

6.5CVSS7.1AI score0.01675EPSS
SaveExploits1References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/10/03 12:0 a.m.9 views

The vulnerability in the /sysmanage/changelogo.php script of the D-Link DAR-8000 router’s microprogramming software allows a hacker to execute arbitrary commands.

The vulnerability in the /sysmanage/changelogo.php script of the D-Link DAR-8000 router’s microprogramming system is related to the unlimited loading of dangerous files. Exploiting this vulnerability could allow a remote attacker to execute arbitrary commands...

6.5CVSS7.2AI score0.15082EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/10/03 12:0 a.m.9 views

The vulnerability in the /useratte/userattestation.php script of the D-Link DAR-7000 router’s microprogramming software allows a hacker to execute arbitrary commands.

The vulnerability of the D-Link DAR-7000 router’s microprogramming software, located in the /useratte/userattestation.php script, involves unlimited loading of dangerous files. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

6.5CVSS7.2AI score0.20998EPSS
SaveExploits1References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/10/03 12:0 a.m.8 views

The vulnerability of the /autheditpwd.php script in the D-Link DAR-8000 router microprogramming system, allowing a hacker to execute arbitrary commands.

The vulnerability of the /autheditpwd.php script in the D-Link DAR-8000 router microprogramming system is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker to execute arbitrary commands remotely...

6.5CVSS7.3AI score0.81451EPSS
SaveExploits1References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/10/03 12:0 a.m.8 views

The vulnerability of the /useratte/web.php microprogrammed routing software from D-Link’s DAR-8000 and DAR-7000 routers allows attackers to execute arbitrary commands.

The vulnerability of the /useratte/web.php microprogrammed routing software from D-Link’s DAR-8000 and DAR-7000 routers lies in the ability to download files of a malicious nature without limitation. Exploiting this vulnerability allows an attacker to execute arbitrary commands remotely...

6.5CVSS7.1AI score0.2283EPSS
SaveExploits1References5Affected Software2
Rows per page
Query Builder