D-Link DAR-7000 mailrecvview.php File SQL Injection Vulnerability

D-Link DAR-7000 is an Internet Behavior Audit Gateway from China AUO D-Link. A SQL injection vulnerability exists in the D-Link DAR-7000 mailrecvview.php file, which can be exploited by attackers to execute illegal SQL commands to steal sensitive database data...

CVE-2023-44694

CVE-2023-44694 affects D-Link DAR-7000 Online Behavior Audit Gateway (DAR-7000) with SQL injection in /log/mailrecvview.php, specifically in version V31R02B1413C. Root cause is lack of protection against SQL query structure attacks in the mailrecvview.php endpoint, enabling arbitrary SQL executio...