CVE-2023-4711

A vulnerability, which was classified as critical, has been found in D-Link DAR-8000-10 up to 20230819. Affected by this issue is some unknown functionality of the file /log/decodmail.php. The manipulation of the argument file leads to os command injection. The attack may be launched remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. VDB-238574 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

• CWE-78

• https://github.com/TinkAnet/cve/blob/main/rce.mdExploit
• https://vuldb.com/?ctiid.238574Permissions Required, VDB Entry
• https://vuldb.com/?id.238574Third Party Advisory, VDB Entry
• https://github.com/TinkAnet/cve/blob/main/rce.mdExploit
• https://vuldb.com/?ctiid.238574Permissions Required, VDB Entry
• https://vuldb.com/?id.238574Third Party Advisory, VDB Entry

Published

Sep 1, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-47104tinyfiledialogs (aka tiny file dialogs) before 3.15.0 allows…9.8
• CVE-2023-47105exec.CommandContext in Chaosblade 0.3 through 1.7.3, when se…8.6
• CVE-2023-47106Traefik is an open source HTTP reverse proxy and load balanc…6.5
• CVE-2023-47107PILOS is an open source front-end for BigBlueButton servers …8.8
• CVE-2023-47108OpenTelemetry-Go Contrib is a collection of third-party pack…7.5
• CVE-2023-47109PrestaShop blockreassurance adds an information block aimed …8.1
• CVE-2023-47110blockreassurance adds an information block aimed at offering…5.3
• CVE-2023-47111ZITADEL provides identity infrastructure. ZITADEL provides a…3.7
• CVE-2023-47112Rundeck is an open source automation service with a web cons…4.3
• CVE-2023-47113BleachBit cleans files to free disk space and to maintain pr…7.3
• CVE-2023-47114Fides is an open-source privacy engineering platform for man…6.1
• CVE-2023-47115Label Studio is an a popular open source data labeling tool.…5.4