Threats tagged 'ghsa-5mhr-g92v-jpjf'

A security vulnerability in D-Link DNS-320 firmware version 2.06B01 allows remote attackers with high privileges to perform OS command injection via the /cgi-bin/webfile_mgr.cgi interface. The flaw affects file management functions including delete, rename, copy, move, chmod, and chown. Public exploit code is available, increasing the risk of exploitation.