cve/2023/CVE-2023-5154.md

### [CVE-2023-5154](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5154)
![](https://img.shields.io/static/v1?label=Product&message=DAR-8000&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=%3D%2020151231%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-434%20Unrestricted%20Upload&color=brighgreen)

### Description

** UNSUPPPORTED WHEN ASSIGNED ** ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability has been found in D-Link DAR-8000 up to 20151231 and classified as critical. This vulnerability affects unknown code of the file /sysmanage/changelogo.php. The manipulation of the argument file_upload leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-240250 is the identifier assigned to this vulnerability. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. NOTE: Vendor was contacted early and confirmed immediately that the product is end-of-life. It should be retired and replaced.

### POC

#### Reference
No PoCs from references.

#### Github
- https://github.com/tanjiti/sec_profile
- https://github.com/wjlin0/poc-doc
- https://github.com/wy876/POC
Update Sat May 25 21:48:12 CEST 2024 2024-05-25 21:48:12 +02:00			`### [CVE-2023-5154](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5154)`
			`![](https://img.shields.io/static/v1?label=Product&message=DAR-8000&color=blue)`
			`![](https://img.shields.io/static/v1?label=Version&message=%3D%2020151231%20&color=brighgreen)`
			`![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-434%20Unrestricted%20Upload&color=brighgreen)`

			`### Description`

			UNSUPPPORTED WHEN ASSIGNED UNSUPPORTED WHEN ASSIGNED A vulnerability has been found in D-Link DAR-8000 up to 20151231 and classified as critical. This vulnerability affects unknown code of the file /sysmanage/changelogo.php. The manipulation of the argument file_upload leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-240250 is the identifier assigned to this vulnerability. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. NOTE: Vendor was contacted early and confirmed immediately that the product is end-of-life. It should be retired and replaced.

			`### POC`

			`#### Reference`
			`No PoCs from references.`

			`#### Github`
			`- https://github.com/tanjiti/sec_profile`
Update CVE sources 2024-05-28 08:49 2024-05-28 08:49:17 +00:00			`- https://github.com/wjlin0/poc-doc`
			`- https://github.com/wy876/POC`
Update Sat May 25 21:48:12 CEST 2024 2024-05-25 21:48:12 +02:00