Lucene search

K
DlinkDar-7000 Firmware

12 matches found

CVE
CVE
added 2023/09/24 11:15 p.m.131 views

CVE-2023-5143

** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as critical, has been found in D-Link DAR-7000 up to 20151231. This issue affects some unknown processing of the file /log/webmailattach.php. The manipulation of the argument table_name leads to an unknown weakness. The attack ma...

9.8CVSS8.1AI score0.00446EPSS
CVE
CVE
added 2023/10/17 6:15 a.m.81 views

CVE-2023-44693

D-Link Online behavior audit gateway DAR-7000 V31R02B1413C is vulnerable to SQL Injection via /importexport.php.

9.8CVSS9.8AI score0.1058EPSS
CVE
CVE
added 2023/10/26 10:15 p.m.48 views

CVE-2023-42406

SQL injection vulnerability in D-Link Online behavior audit gateway DAR-7000 V31R02B1413C allows a remote attacker to obtain sensitive information and execute arbitrary code via the editrole.php component.

9.8CVSS9.5AI score0.15535EPSS
CVE
CVE
added 2024/05/16 6:15 a.m.47 views

CVE-2024-4961

** UNSUPPORTED WHEN ASSIGNED ** A vulnerability classified as critical was found in D-Link DAR-7000-40 V31R02B1413C. Affected by this vulnerability is an unknown functionality of the file /user/onlineuser.php. The manipulation of the argument file_upload leads to unrestricted upload. The attack can...

9.8CVSS6.9AI score0.00977EPSS
CVE
CVE
added 2024/05/16 8:15 a.m.44 views

CVE-2024-4965

** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in D-Link DAR-7000-40 V31R02B1413C and classified as critical. This issue affects some unknown processing of the file /useratte/resmanage.php. The manipulation of the argument load leads to os command injection. The attack may be initiated r...

9.8CVSS7.4AI score0.01888EPSS
CVE
CVE
added 2024/05/16 6:15 a.m.41 views

CVE-2024-4960

** UNSUPPORTED WHEN ASSIGNED ** A vulnerability classified as critical has been found in D-Link DAR-7000-40 V31R02B1413C. Affected is an unknown function of the file interface/sysmanage/licenseauthorization.php. The manipulation of the argument file_upload leads to unrestricted upload. It is possib...

9.8CVSS6.9AI score0.00889EPSS
CVE
CVE
added 2024/05/16 8:15 a.m.41 views

CVE-2024-4964

** UNSUPPORTED WHEN ASSIGNED ** A vulnerability has been found in D-Link DAR-7000-40 V31R02B1413C and classified as critical. This vulnerability affects unknown code of the file /firewall/urlblist.php. The manipulation of the argument file leads to unrestricted upload. The attack can be initiated r...

9.8CVSS7AI score0.00935EPSS
CVE
CVE
added 2023/10/17 6:15 a.m.39 views

CVE-2023-44694

D-Link Online behavior audit gateway DAR-7000 V31R02B1413C is vulnerable to SQL Injection via /log/mailrecvview.php.

9.8CVSS9.8AI score0.00147EPSS
CVE
CVE
added 2024/09/19 9:15 p.m.39 views

CVE-2024-9004

A vulnerability classified as critical has been found in D-Link DAR-7000 up to 20240912. Affected is an unknown function of the file /view/DBManage/Backup_Server_commit.php. The manipulation of the argument host leads to os command injection. It is possible to launch the attack remotely. The exploi...

9.8CVSS7.2AI score0.01475EPSS
CVE
CVE
added 2024/05/16 7:15 a.m.38 views

CVE-2024-4962

** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as critical, has been found in D-Link DAR-7000-40 V31R02B1413C. Affected by this issue is some unknown functionality of the file /useratte/resmanage.php. The manipulation of the argument file leads to unrestricted upload. The att...

9.8CVSS6.8AI score0.00847EPSS
CVE
CVE
added 2024/05/16 7:15 a.m.37 views

CVE-2024-4963

** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as critical, was found in D-Link DAR-7000-40 V31R02B1413C. This affects an unknown part of the file /url/url.php. The manipulation of the argument file_upload leads to unrestricted upload. It is possible to initiate the attack re...

9.8CVSS6.8AI score0.01145EPSS
CVE
CVE
added 2023/12/07 10:15 p.m.31 views

CVE-2023-6581

A vulnerability has been found in D-Link DAR-7000 up to 20231126 and classified as critical. This vulnerability affects unknown code of the file /user/inc/workidajax.php. The manipulation of the argument id leads to sql injection. The exploit has been disclosed to the public and may be used. VDB-24...

9.8CVSS7.9AI score0.00088EPSS