CVSS: 8.1EPSS: 0%CPEs: 2EXPL: 1CVE-2023-4711 – D-Link DAR-8000-10 decodmail.php os command injection
https://notcve.org/view.php?id=CVE-2023-4711
A vulnerability, which was classified as critical, has been found in D-Link DAR-8000-10 up to 20230819. Affected by this issue is some unknown functionality of the file /log/decodmail.php. The manipulation of the argument file leads to os command injection. The attack may be launched remotely. The complexity of an attack is rather high. • https://github.com/TinkAnet/cve/blob/main/rce.md https://vuldb.com/?ctiid.238574 https://vuldb.com/?id.238574 • CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') •
CVSS: 9.8EPSS: 94%CPEs: 2EXPL: 2CVE-2023-4542 – D-Link DAR-8000-10 sys1.php os command injection
https://notcve.org/view.php?id=CVE-2023-4542
A vulnerability was found in D-Link DAR-8000-10 up to 20230809. It has been classified as critical. This affects an unknown part of the file /app/sys1.php. The manipulation of the argument cmd with the input id leads to os command injection. It is possible to initiate the attack remotely. • https://github.com/PumpkinBridge/CVE-2023-4542 https://github.com/PumpkinBridge/cve/blob/main/rce.md https://vuldb.com/?ctiid.238047 https://vuldb.com/?id.238047 • CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') •