DAR-7000 router SQL Injection

The vulnerability of the /sysmanage/editmanageadmin.php component in the DAR-7000 router microprogramming system is related to the lack of validation for the sequence of XML objects. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL code remotely...