CVE-2023-4542

poc The D-LINK-DAR-8000-10 Online behavior audit gateway has rce vulnerabilities official website:http://www.dlink.com.cn/ version:D-LINK DAR-8000-10 See the login page. Construct url:...

D-Link DAR-8000-10 - Command Injection

D-Link DAR-8000-10 version has an operating system command injection vulnerability. The vulnerability originates from the parameter id of the file /app/sys1.php which can lead to operating system command injection. id: CVE-2023-4542 info: name: D-Link DAR-8000-10 - Command Injection author:...

Vulnerability of the script /app/sys1.php of the D-Link DAR-8000-10 router microprogramming system, allowing a hacker to execute arbitrary commands

The vulnerability of the /app/sys1.php script of the D-Link DAR-8000-10 router microprogramming system is related to errors in processing the invoked URL address. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

CVE-2023-4542: Improper Neutralization of Special Elements used in an OS Command

A vulnerability was found in D-Link DAR-8000-10 up to 20230809. It has been classified as critical. This affects an unknown part of the file /app/sys1.php. The manipulation of the argument cmd with the input id leads to os command injection. It is possible to initiate the attack remotely. The...