| Titolo | D-Link DIR-823X 250416 Command Injection |
|---|
| Descrizione | In handler goform/set_prohibiting,the macaddr parameter is not properly validated.Attackers can set malicious strings to perform injection attacks. There are two injection points in this function. |
|---|
| Fonte | ⚠️ https://github.com/n1ptune/dink/blob/main/set_prohibiting.md |
|---|
| Utente | neptune111 (UID 90924) |
|---|
| Sottomissione | 24/09/2025 17:29 (11 mesi fa) |
|---|
| Moderazione | 27/09/2025 10:16 (3 days later) |
|---|
| Stato | Duplicato |
|---|
| Voce VulDB | 301236 [D-Link DIR-823X HTTP POST Request /goform/set_prohibiting escalationi di privilegi] |
|---|
| Punti | 0 |
|---|