CVE-2023-5152

The CVE-2023-5152 entry refers to a SQL injection in D-Link DAR-7000/DAR-8000 (up to 20151231) via the /importexport.php file by manipulating the sql parameter. The issue is on end-of-life products (no longer supported by the maintainer); exploitation is remote and the public exploit is noted. Pu...

CVE-2023-5152 D-Link DAR-7000/DAR-8000 importexport.php sql injection

UNSUPPORTED WHEN ASSIGNED A vulnerability, which was classified as critical, has been found in D-Link DAR-7000 and DAR-8000 up to 20151231. Affected by this issue is some unknown functionality of the file /importexport.php. The manipulation of the argument sql leads to sql injection. The attack m...