Sql injection

2014-05-2713:55:00

PRIOn knowledge base

www.prio-n.com

9.4 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

65.0%

JSON

Multiple SQL injection vulnerabilities in the administration login page in D-Link DAP-1350 (Rev. A1) with firmware 1.14 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) username or (2) password.

CPENameOperatorVersion
dap-1350eqrev.-a1
dap-1350_firmwarele1.14
dap-1350_firmwareeq1.10

Name	Operator	Version
dap-1350	eq	rev.-a1
dap-1350_firmware	le	1.14
dap-1350_firmware	eq	1.10

References

secunia.com/advisories/58254

securityadvisories.dlink.com/security/publication.aspx?name=SAP10023

www.securityfocus.com/bid/67310