D-Link · weakness class

SQL Injection

8 CVEs

Out of date: the sync last ran 5 hours ago. Newer CVEs and scores may be missing from the map.

Every dot is a CVE in what this vendor ships; the named ones are the most at risk.

likely to be exploited: 3

Every one of the 8 is a mark on the map. Named now: 1 to 8, most at risk first.

D-Link DAR-8000 autheditpwd.php sql injectionCVE-2023-5151D-Link · CVSS 6.3 · 81% likely
CWE-89
D-Link DAR-7000 edit_manageadmin.php sql injectionCVE-2023-5322D-Link · CVSS 4.7 · 17% likely
CWE-89
D-Link Online behavior audit gateway DAR-7000 V31R02B1413C is vulnerable to SQL Injection via /importexport.php.CVE-2023-44693Dlink · 14% likely
CWE-89
D-Link DAR-7000/DAR-8000 importexport.php sql injectionCVE-2023-5152D-Link · CVSS 6.3 · 8.5% likely
CWE-89
D-Link DAR-7000 workidajax.php sql injectionCVE-2023-6581D-Link · CVSS 5.5 · 4.0% likely
CWE-89
SQL injection vulnerability in D-Link Online behavior audit gateway DAR-7000 V31R02B1413C allows a remote attacker to obtain sensitive information and execute arbitrary code via t…CVE-2023-42406Dlink · 2.4% likely
CWE-89
D-Link DAR-8000 querysql.php sql injectionCVE-2023-5153D-Link · CVSS 6.3 · 1.7% likely
CWE-89
D-Link Online behavior audit gateway DAR-7000 V31R02B1413C is vulnerable to SQL Injection via /log/mailrecvview.php.CVE-2023-44694Dlink · 0.8% likely
CWE-89

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.