Description
/useratte/userattestation. php的某些未知处理。对参数web_img的操作导致不受限制的上传
D-Link DAR-700 userattestation.php存在任意文件上传漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://github.com/llixixi/cve/blob/main/D-LINK-DAR-7000_upload_%20userattestation.md
https://vuldb.com/zh/vuln/240245
https://stack.chaitin.com/vuldb/detail/331a26a6-a759-4f38-885d-8fd8cbbe8498
https://supportannouncement.us.dlink.com/security/publication.aspx?name=sap10354