9 matches found
CVE-2026-16447 D-Link DNS-320 multi_uploadify.php unrestricted upload
A vulnerability has been found in D-Link DNS-320 1.0.2. Impacted is an unknown function of the file /web/jquery/uploader/multiuploadify.php. The manipulation of the argument Filedata leads to unrestricted upload. Remote exploitation of the attack is possible. The exploit has been disclosed to the...
EUVD-2026-46143
A vulnerability was detected in D-Link DNS-320 1.0.2. This impacts an unknown function of the file /mydlink/multiuploadify.php. Performing a manipulation of the argument Filedata results in unrestricted upload. The attack is possible to be carried out remotely. The exploit is now public and may b...
CVE-2026-16332 D-Link DNS-320 multi_uploadify.php unrestricted upload
A vulnerability was detected in D-Link DNS-320 1.0.2. This impacts an unknown function of the file /mydlink/multiuploadify.php. Performing a manipulation of the argument Filedata results in unrestricted upload. The attack is possible to be carried out remotely. The exploit is now public and may b...
CVE-2025-44023
An issue in dlink DNS-320 v.1.00 and DNS-320LW v.1.01.0914.20212 allows an attacker to execute arbitrary via the accountmgr.cgi-cgichgadminpw components...
CVE-2025-44023
A security vulnerability exists in D-Link DNS-320 v.1.00 and DNS-320LW v.1.01.0914.20212 NAS devices. The flaw is located in the account_mgr.cgi component, specifically within the cgi_chg_admin_pw function, which allows an attacker to execute arbitrary code . To mitigate this risk, users of DNS-3...
CVE-2025-44023
An issue in dlink DNS-320 v.1.00 and DNS-320LW v.1.01.0914.20212 allows an attacker to execute arbitrary via the accountmgr.cgi-cgichgadminpw components...
CVE-2025-44023: Improper Neutralization of Special Elements used in a Command
An issue in dlink DNS-320 v.1.00 and DNS-320LW v.1.01.0914.20212 allows an attacker to execute arbitrary via the accountmgr.cgi-cgichgadminpw components...
