The vulnerability of the workidajax.php script in the DAR-7000 router microprogramming software allows a hacker to execute arbitrary SQL code and gain increased privileges.

The vulnerability of the workidajax.php script in the DAR-7000 router microprogramming software is related to the lack of measures taken to protect the SQL query structure when processing the id parameter. Exploiting this vulnerability allows an attacker to execute arbitrary SQL code and enhance...

CVE-2023-6581: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in D-Link DAR-7000 up to 20231126 and classified as critical. This vulnerability affects unknown code of the file /user/inc/workidajax.php. The manipulation of the argument id leads to sql injection. The exploit has been disclosed to the public and may be used...