Approved changes feed: RSS · Atom

cpe:2.3:h:d-link:dar-7000:31r02b1413c:*:*:*:*:*:*:*

part: h version: 31r02b1413c update: *

VendorD Link (f324da99-07b9-589f-a800-1ce04a08f309)
ProductDar 7000 (7ae0b326-e856-55f4-9e9e-2e8df3b9eda1)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-5145 vulnerable 2026-06-08 06:19:42.665489 D-Link DAR-7000 licence.php unrestricted upload
MEDIUM (6.3)
** UNSUPPORTED WHEN ASSIGNED ** A vulnerability has been found in D-Link DAR-7000 up to 20151231 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /sysmanage/licence.php. The manipulation of the argument file_upload leads to unrestricted upload. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-240241 was assigned to this vulnerability. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. NOTE: Vendor was contacted early and confirmed immediately that the product is end-of-life. It should be retired and replaced.
Published: 2023-09-24T23:31:05.183Z
Updated: 2024-08-02T07:52:07.509Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-44694 vulnerable 2026-06-08 06:12:41.469759 Details available
D-Link Online behavior audit gateway DAR-7000 V31R02B1413C is vulnerable to SQL Injection via /log/mailrecvview.php.
Published: 2023-10-17T00:00:00.000Z
Updated: 2024-09-16T17:52:14.615Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-44693 vulnerable 2026-06-08 06:12:41.467513 Details available
D-Link Online behavior audit gateway DAR-7000 V31R02B1413C is vulnerable to SQL Injection via /importexport.php.
Published: 2023-10-17T00:00:00.000Z
Updated: 2024-09-16T17:55:23.839Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-42406 vulnerable 2026-06-08 06:11:08.032814 Details available
SQL injection vulnerability in D-Link Online behavior audit gateway DAR-7000 V31R02B1413C allows a remote attacker to obtain sensitive information and execute arbitrary code via the editrole.php component.
Published: 2023-10-26T00:00:00.000Z
Updated: 2024-09-10T19:36:34.540Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.