जमा करें #640394: D-Link router DI-500WF Command Injection
| शीर्षक | D-Link router DI-500WF Command Injection |
|---|---|
| विवरण | in jhttpd file, version_upgrade_asp function, path paramater can be controled, and pass to system function to exec. and there is no any fliter |
| स्रोत | ⚠️ https:/ |
| उपयोगकर्ता | physicszq (UID 76531) |
| सबमिशन | 23/08/2025 08:41 AM (1 वर्ष पहले) |
| संयम | 30/08/2025 06:53 PM (7 days later) |
| स्थिति | स्वीकृत |
| VulDB प्रविष्टि | 322044 [D-Link DI-500WF 14.04.10A1T jhttpd /version_upgrade.asp path अधिकार वृद्धि] |
| अंक | 16 |