CVE-2014-3872 in DAP-1350
Summary
Multiple SQL injection vulnerabilities in the administration login page in D-Link DAP-1350 (Rev. A1) with firmware 1.14 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) username or (2) password.
If you want to get best quality of vulnerability data, you may have to visit VulDB.
Reservation
05/27/2014
Disclosure
05/27/2014
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 69829 | D-Link DAP-1350 Administration sql injection | 89 | Not defined | Not defined | CVE-2014-3872 |
| 13186 | D-Link DAP-1350 Web sql injection | 89 | Proof-of-Concept | Unavailable | CVE-2014-3872 |