Free Trial

Multiple SQL injection vulnerabilities in D-Link DSR-Routers

Overview :
Multiple SQL injection vulnerabilities in D-Link DSR Routers
Affected Product(s) :
  • D-Link DSR-150 (Firmware < v1.08B44)
  • D-Link DSR-150N (Firmware < v1.05B64)
  • D-Link DSR-250 and DSR-250N (Firmware < v1.08B44)
  • D-Link DSR-500 and DSR-500N (Firmware < v1.08B77)
  • D-Link DSR-1000 and DSR-1000N (Firmware < v1.08B77)

 

Vulnerability Details :
CVE ID : CVE-2013-5945
Authentication Bypass by SQL-Injection
CVE ID : CVE-2013-59456
Privilege Escalation by Arbitrary Command Execution

Solution :

latest firmware update will fix the attack.

 

 

Common Vulnerabilityies and Exposures

Contact us to get started

CVE-2022-41157 : KYUNGRINARA ERP SOLUTION SERP SERVER HARD-CODED CREDENTIALS

CVE-2022-41157 : KYUNGRINARA ERP SOLUTION SERP SERVER HARD-CODED CREDENTIALS

Description A specific file on the sERP server if Kyungrinara(ERP solution) has a fixed password with the SYSTEM authority. This

Learn more
CVE-2022-45884 : LINUX KERNEL UP TO 6.0.9 DVBDEV.C DVB_REGISTER_DEVICE USE AFTER FREE

CVE-2022-45884 : LINUX KERNEL UP TO 6.0.9 DVBDEV.C DVB_REGISTER_DEVICE USE AFTER FREE

Description An issue was discovered in the Linux kernel through 6.0.9. drivers/media/dvb-core/dvbdev.c has a use-after-free, related to dvb_register_device dynamically allocating

Learn more
CVE-2022-41875 : OPTICA UP TO 0.10.1 JSON OJ.SAFE_LOAD DESERIALIZATION

CVE-2022-41875 : OPTICA UP TO 0.10.1 JSON OJ.SAFE_LOAD DESERIALIZATION

Description A remote code execution (RCE) vulnerability in Optica allows unauthenticated attackers to execute arbitrary code via specially crafted JSON

Learn more