D-Link DAR-8000-10 - Command Injection

D-Link DAR-8000-10 version has an operating system command injection vulnerability. The vulnerability originates from the parameter id of the file /app/sys1.php which can lead to operating system command injection. id: CVE-2023-4542 info: name: D-Link DAR-8000-10 - Command Injection author:...

CVE-2023-4542

poc The D-LINK-DAR-8000-10 Online behavior audit gateway has rce vulnerabilities official website:http://www.dlink.com.cn/ version:D-LINK DAR-8000-10 See the login page. Construct url:...

Vulnerability of the script /app/sys1.php of the D-Link DAR-8000-10 router microprogramming system, allowing a hacker to execute arbitrary commands

The vulnerability of the /app/sys1.php script of the D-Link DAR-8000-10 router microprogramming system is related to errors in processing the invoked URL address. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...