Lucene search
+L

296 matches found

Cvelist
Cvelist
added 2023/09/25 12:00 a.m.47 views

CVE-2023-5146 D-Link DAR-7000/DAR-8000 updatelib.php unrestricted upload

UNSUPPORTED WHEN ASSIGNED A vulnerability was found in D-Link DAR-7000 and DAR-8000 up to 20151231 and classified as critical. Affected by this issue is some unknown functionality of the file /sysmanage/updatelib.php. The manipulation of the argument fileupload leads to unrestricted upload. The...

6.5CVSS8.9AI score0.32915EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2023/09/25 12:00 a.m.13 views

D-Link DAR-7000 SQL Injection Vulnerability

D-Link DAR-7000 is an Internet behavior auditing gateway from China Youxun D-Link. SQL injection vulnerability exists in D-Link DAR-7000 20151231 and earlier versions, which originates from a SQL injection vulnerability in the parameter sql of the file /importexport...

6.5CVSS8AI score0.06994EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2023/09/25 12:00 a.m.11 views

D-Link DAR-8000 SQL Injection Vulnerability

D-Link DAR-8000 is an Internet Behavior Audit Gateway from China Youxun D-Link. SQL injection vulnerability exists in D-Link DAR-8000 20151231 and earlier versions, which originates from an SQL injection vulnerability in the parameter hidid in the file /autheditpwd.php...

8.8CVSS8AI score0.81451EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2023/09/25 12:00 a.m.12 views

D-Link DAR-7000 Code Issue Vulnerability

D-Link DAR-7000 is an Internet Behavior Audit Gateway from China Youxun D-Link. A code issue vulnerability exists in the D-Link DAR-7000 and DAR-8000, which stems from an arbitrary file upload vulnerability in the parameter fileupload of file/useratte/web...

8.8CVSS7.4AI score0.2283EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2023/09/25 12:00 a.m.12 views

D-Link DAR-8000 Code Issue Vulnerability

D-Link DAR-8000 is an Internet behavior auditing gateway from China Youxun D-Link. A code issue vulnerability exists in D-Link DAR-8000 20151231 and earlier versions, which stems from an arbitrary file upload vulnerability in the parameter fileupload in the file /sysmanage/changelogo.php...

8.8CVSS7.3AI score0.15082EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2023/09/24 11:31 p.m.35 views

CVE-2023-5145 D-Link DAR-7000 licence.php unrestricted upload

UNSUPPORTED WHEN ASSIGNED A vulnerability has been found in D-Link DAR-7000 up to 20151231 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /sysmanage/licence.php. The manipulation of the argument fileupload leads to unrestricted upload. The attac...

6.5CVSS8.9AI score0.34312EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2023/09/24 11:31 p.m.40 views

CVE-2023-5145 D-Link DAR-7000 licence.php unrestricted upload

UNSUPPORTED WHEN ASSIGNED A vulnerability has been found in D-Link DAR-7000 up to 20151231 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /sysmanage/licence.php. The manipulation of the argument fileupload leads to unrestricted upload. The attac...

6.5CVSS6.9AI score0.34312EPSS
SaveExploits0References4
CVE
CVE
added 2023/09/24 11:31 p.m.71 views

CVE-2023-5145

CVE-2023-5145 concerns D-Link DAR-7000 (up to 20151231) and relates to the sysmanage/licence.php endpoint. The vulnerability arises from improper handling of the file_upload argument, enabling unrestricted remote uploads. Public disclosure is noted in multiple sources, and the product is describe...

8.8CVSS7.1AI score0.34312EPSS
SaveExploits0References4Affected Software1
OSV
OSV
added 2023/09/24 11:15 p.m.18 views

CVE-2023-5143

UNSUPPORTED WHEN ASSIGNED A vulnerability, which was classified as critical, has been found in D-Link DAR-7000 up to 20151231. This issue affects some unknown processing of the file /log/webmailattach.php. The manipulation of the argument tablename leads to an unknown weakness. The attack may be...

9.8CVSS5.4AI score0.0361EPSS
SaveExploits0References4
NVD
NVD
added 2023/09/24 11:15 p.m.24 views

CVE-2023-5143

UNSUPPORTED WHEN ASSIGNED A vulnerability, which was classified as critical, has been found in D-Link DAR-7000 up to 20151231. This issue affects some unknown processing of the file /log/webmailattach.php. The manipulation of the argument tablename leads to an unknown weakness. The attack may be...

9.8CVSS7.2AI score0.0361EPSS
SaveExploits0References4
Prion
Prion
added 2023/09/24 11:15 p.m.28 views

Design/Logic Flaw

UNSUPPORTED WHEN ASSIGNED A vulnerability, which was classified as critical, was found in D-Link DAR-7000 and DAR-8000 up to 20151231. Affected is an unknown function of the file /sysmanage/updateos.php. The manipulation of the argument fileupload leads to unrestricted upload. It is possible to...

6.5CVSS8.7AI score0.06014EPSS
SaveExploits1References5Affected Software2
Prion
Prion
added 2023/09/24 11:15 p.m.35 views

Design/Logic Flaw

UNSUPPORTED WHEN ASSIGNED A vulnerability, which was classified as critical, has been found in D-Link DAR-7000 up to 20151231. This issue affects some unknown processing of the file /log/webmailattach.php. The manipulation of the argument tablename leads to an unknown weakness. The attack may be...

6.5CVSS9.5AI score0.0361EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
added 2023/09/24 11:00 p.m.50 views

CVE-2023-5144 D-Link DAR-7000/DAR-8000 updateos.php unrestricted upload

UNSUPPORTED WHEN ASSIGNED A vulnerability, which was classified as critical, was found in D-Link DAR-7000 and DAR-8000 up to 20151231. Affected is an unknown function of the file /sysmanage/updateos.php. The manipulation of the argument fileupload leads to unrestricted upload. It is possible to...

6.5CVSS9AI score0.06014EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
added 2023/09/24 11:00 p.m.20 views

CVE-2023-5144 D-Link DAR-7000/DAR-8000 updateos.php unrestricted upload

UNSUPPORTED WHEN ASSIGNED A vulnerability, which was classified as critical, was found in D-Link DAR-7000 and DAR-8000 up to 20151231. Affected is an unknown function of the file /sysmanage/updateos.php. The manipulation of the argument fileupload leads to unrestricted upload. It is possible to...

6.5CVSS6.9AI score0.06014EPSS
SaveExploits1References5
CVE
CVE
added 2023/09/24 11:00 p.m.79 views

CVE-2023-5144

An advisory describes CVE-2023-5144 as a critical vulnerability in D-Link DAR-7000/DAR-8000 (up to 2015-12-31) affecting an unknown function in /sysmanage/updateos.php. Manipulating the file_upload parameter leads to unrestricted upload, enabling remote execution. The affected devices are end-of-...

8.8CVSS7.1AI score0.06014EPSS
SaveExploits1References5Affected Software1
Vulnrichment
Vulnrichment
added 2023/09/24 10:31 p.m.11 views

CVE-2023-5143 D-Link DAR-7000 webmailattach.php Privilege Escalation

UNSUPPORTED WHEN ASSIGNED A vulnerability, which was classified as critical, has been found in D-Link DAR-7000 up to 20151231. This issue affects some unknown processing of the file /log/webmailattach.php. The manipulation of the argument tablename leads to an unknown weakness. The attack may be...

6.5CVSS7.2AI score0.0361EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2023/09/24 10:31 p.m.40 views

CVE-2023-5143 D-Link DAR-7000 webmailattach.php Privilege Escalation

UNSUPPORTED WHEN ASSIGNED A vulnerability, which was classified as critical, has been found in D-Link DAR-7000 up to 20151231. This issue affects some unknown processing of the file /log/webmailattach.php. The manipulation of the argument tablename leads to an unknown weakness. The attack may be...

6.5CVSS9.8AI score0.0361EPSS
SaveExploits0References4
CVE
CVE
added 2023/09/24 10:31 p.m.167 views

CVE-2023-5143

Affected product: D-Link DAR-7000 (up to 20151231). The issue resides in the handling of /log/webmailattach.php, where manipulating the table_name argument leads to a vulnerability. The incident is described as remotely exploitable with public disclosure of the exploit; the product is end-of-life...

9.8CVSS8.1AI score0.0361EPSS
SaveExploits0References4Affected Software1
Positive Technologies
Positive Technologies
added 2023/09/24 12:00 a.m.15 views

PT-2023-5607 · D Link · D-Link Dar-8000

Name of the Vulnerable Software and Affected Versions: D-Link DAR-8000 up to 20151231 Description: A critical vulnerability was found in the D-Link DAR-8000, affecting an unknown part of the file /Tool/querysql.php. This issue leads to sql injection and can be initiated remotely. The exploit has...

6.5CVSS7.2AI score0.01675EPSS
SaveExploits1References7
CNNVD
CNNVD
added 2023/09/24 12:00 a.m.12 views

D-Link DAR-7000 Code Issue Vulnerability

The D-Link DAR-7000 is an Internet Behavior Audit Gateway from China AUO D-Link. A code issue vulnerability exists in the D-Link DAR-7000. No information about this vulnerability is available at this time, please stay tuned to CNNVD or vendor announcements...

8.8CVSS6.9AI score0.34312EPSS
SaveExploits0References6
Rows per page
Query Builder