| tiêu đề | D-Link (Shanghai)Limited Corp. D-Link DNS320L 1.0.2 Unrestricted Upload of File with Dangerous Type |
|---|
| Mô tả | A critical vulnerability was found in D-Link (Shanghai)Limited Corp. D-Link DNS320 plantform, It affects an unknown function of the file /web/web_file/upload.php. The manipulation leads to unauthenticated arbitrary file upload. An unauthenticated remote attacker can exploit this vulnerability by sending a specially crafted malicious request to upload an executable web shell. Due to the lack of proper input validation and authorization checks, the attacker can achieve arbitrary remote code execution (RCE) and gain full control over the underlying server operating system. |
|---|
| Nguồn | ⚠️ https://ucn9h68n9289.feishu.cn/wiki/JJcTwHz7aiKeq6kSItMcoeSUnMc?from=from_copylink |
|---|
| Người dùng | bigbrother_man (UID 96003) |
|---|
| Đệ trình | 15/06/2026 04:11 (cách đây 1 tháng) |
|---|
| Kiểm duyệt | 20/07/2026 19:50 (1 month later) |
|---|
| Trạng thái | được chấp nhận |
|---|
| Mục VulDB | 380693 [D-Link DNS-320 1.0.2 /web/web_file/upload.php Tệp tin nâng cao đặc quyền] |
|---|
| điểm | 20 |
|---|