CVSS: 8.8EPSS: 1%CPEs: 4EXPL: 2CVE-2023-5146 – D-Link DAR-7000/DAR-8000 updatelib.php unrestricted upload
https://notcve.org/view.php?id=CVE-2023-5146
A vulnerability was found in D-Link DAR-7000 and DAR-8000 up to 20151231 and classified as critical. Affected by this issue is some unknown functionality of the file /sysmanage/updatelib.php. The manipulation of the argument file_upload leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. • https://github.com/llixixi/cve/blob/main/D-LINK-DAR-7000_upload_%20updatelib.md https://github.com/llixixi/cve/blob/main/D-LINK-DAR-8000-10_upload_%20updatelib.md https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10354 https://vuldb.com/?ctiid.240242 https://vuldb.com/?id.240242 • CWE-434: Unrestricted Upload of File with Dangerous Type •
CVSS: 8.8EPSS: 0%CPEs: 4EXPL: 1CVE-2023-5145 – D-Link DAR-7000 licence.php unrestricted upload
https://notcve.org/view.php?id=CVE-2023-5145
A vulnerability has been found in D-Link DAR-7000 up to 20151231 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /sysmanage/licence.php. The manipulation of the argument file_upload leads to unrestricted upload. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. • https://github.com/llixixi/cve/blob/main/D-LINK-DAR-7000_upload_%20licence.md https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10354 https://vuldb.com/?ctiid.240241 https://vuldb.com/?id.240241 • CWE-434: Unrestricted Upload of File with Dangerous Type •
CVSS: 8.8EPSS: 0%CPEs: 4EXPL: 2CVE-2023-5144 – D-Link DAR-7000/DAR-8000 updateos.php unrestricted upload
https://notcve.org/view.php?id=CVE-2023-5144
A vulnerability, which was classified as critical, was found in D-Link DAR-7000 and DAR-8000 up to 20151231. Affected is an unknown function of the file /sysmanage/updateos.php. The manipulation of the argument file_upload leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. • https://github.com/llixixi/cve/blob/main/D-LINK-DAR-7000_upload_%20changelogo.md https://github.com/llixixi/cve/blob/main/D-LINK-DAR-8000-10_upload_%20updateos.md https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10354 https://vuldb.com/?ctiid.240240 https://vuldb.com/?id.240240 • CWE-434: Unrestricted Upload of File with Dangerous Type •
CVSS: 8.1EPSS: 0%CPEs: 2EXPL: 1CVE-2023-4711 – D-Link DAR-8000-10 decodmail.php os command injection
https://notcve.org/view.php?id=CVE-2023-4711
A vulnerability, which was classified as critical, has been found in D-Link DAR-8000-10 up to 20230819. Affected by this issue is some unknown functionality of the file /log/decodmail.php. The manipulation of the argument file leads to os command injection. The attack may be launched remotely. The complexity of an attack is rather high. • https://github.com/TinkAnet/cve/blob/main/rce.md https://vuldb.com/?ctiid.238574 https://vuldb.com/?id.238574 • CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') •
CVSS: 9.8EPSS: 94%CPEs: 2EXPL: 2CVE-2023-4542 – D-Link DAR-8000-10 sys1.php os command injection
https://notcve.org/view.php?id=CVE-2023-4542
A vulnerability was found in D-Link DAR-8000-10 up to 20230809. It has been classified as critical. This affects an unknown part of the file /app/sys1.php. The manipulation of the argument cmd with the input id leads to os command injection. It is possible to initiate the attack remotely. • https://github.com/PumpkinBridge/CVE-2023-4542 https://github.com/PumpkinBridge/cve/blob/main/rce.md https://vuldb.com/?ctiid.238047 https://vuldb.com/?id.238047 • CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') •