| शीर्षक | D-Link DCS933L v1.14.11 Command Injection |
|---|
| विवरण | A command injection vulnerability exists in the setSystemAdmin function of the alphapd binary in D-Link DCS-933L firmware v1.14.1. The AdminID parameter is obtained directly from user input and inserted into the shell command without proper sanitization, allowing a remote attacker to execute arbitrary operating system commands through a carefully crafted request |
|---|
| स्रोत | ⚠️ https://github.com/jinhao118/cve/blob/main/D-Link%20DCS933L_v1.14.11.md |
|---|
| उपयोगकर्ता | allanp0e (UID 94632) |
|---|
| सबमिशन | 06/02/2026 07:49 AM (8 महीनों पहले) |
|---|
| संयम | 08/02/2026 03:48 PM (2 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 344936 [D-Link DCS-933L तक 1.14.11 alphapd /setSystemAdmin AdminID अधिकार वृद्धि] |
|---|
| अंक | 19 |
|---|