提交 #640394: D-Link router DI-500WF Command Injection
| 标题 | D-Link router DI-500WF Command Injection |
|---|---|
| 描述 | in jhttpd file, version_upgrade_asp function, path paramater can be controled, and pass to system function to exec. and there is no any fliter |
| 来源 | ⚠️ https:/ |
| 用户 | physicszq (UID 76531) |
| 提交 | 2025-08-23 08時41分 (1 年前) |
| 管理 | 2025-08-30 18時53分 (7 days later) |
| 状态 | 已接受 |
| VulDB条目 | 322044 [D-Link DI-500WF 14.04.10A1T jhttpd /version_upgrade.asp path 权限提升] |
| 积分 | 16 |