The vulnerability in the /sysmanage/updateos.php script of the DAR-7000 router’s microprogramming software allows a attacker to execute arbitrary commands.

The vulnerability in the /sysmanage/updateos.php script of the DAR-7000 router’s microprogramming system involves unlimited loading of dangerous files. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

CVE-2023-5147: Unrestricted Upload of File with Dangerous Type

UNSUPPORTED WHEN ASSIGNED A vulnerability was found in D-Link DAR-7000 up to 20151231. It has been classified as critical. This affects an unknown part of the file /sysmanage/updateos.php. The manipulation of the argument 1fileupload leads to unrestricted upload. It is possible to initiate the...

CVE-2023-4739: Unrestricted Upload of File with Dangerous Type

A vulnerability, which was classified as critical, has been found in Byzoro Smart S85F Management Platform up to 20230820. Affected by this issue is some unknown functionality of the file /sysmanage/updateos.php. The manipulation of the argument 1fileupload leads to unrestricted upload. The attac...