CVE-2024-4960

** UNSUPPORTED WHEN ASSIGNED ** A vulnerability classified as critical has been found in D-Link DAR-7000-40 V31R02B1413C. Affected is an unknown function of the file interface/sysmanage/licenseauthorization.php. The manipulation of the argument file_upload leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-264528. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. NOTE: Vendor was contacted early and confirmed immediately that the product is end-of-life. It should be retired and replaced.

• CWE-434

• https://github.com/h0e4a0r1t/h0e4a0r1t.github.io/blob/master/2024/%3CWHB%7Cj%5CIbSU0m4%3A_/D-LINK-DAR-7000_upload_%20licenseauthorization.php.php.pdfBroken Link
• https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10354Vendor Advisory
• https://vuldb.com/?ctiid.264528Permissions Required, VDB Entry
• https://vuldb.com/?id.264528Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.333777Third Party Advisory, VDB Entry
• https://github.com/h0e4a0r1t/h0e4a0r1t.github.io/blob/master/2024/%3CWHB%7Cj%5CIbSU0m4%3A_/D-LINK-DAR-7000_upload_%20licenseauthorization.php.php.pdfBroken Link
• https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10354Vendor Advisory
• https://vuldb.com/?ctiid.264528Permissions Required, VDB Entry
• https://vuldb.com/?id.264528Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.333777Third Party Advisory, VDB Entry

Published

May 16, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-4959The Frontend Checklist WordPress plugin through 2.3.2 does n…4.8
• CVE-2024-49592Trial installer for McAfee Total Protection (legacy trial in…6.7
• CVE-2024-49593In Advanced Custom Fields (ACF) before 6.3.9 and Secure Cust…5.3
• CVE-2024-49595Dell Wyse Management Suite, version WMS 4.4 and before, cont…4.9
• CVE-2024-49596Dell Wyse Management Suite, version WMS 4.4 and prior, conta…6.5
• CVE-2024-49597Dell Wyse Management Suite, versions WMS 4.4 and prior, cont…7.2
• CVE-2024-49600Dell Power Manager (DPM), versions prior to 3.17, contain an…7.8
• CVE-2024-49601Dell Unity, version(s) 5.4 and prior, contain(s) an Improper…9.8
• CVE-2024-49602Dell PowerScale OneFS Versions 8.2.2.x through 9.8.0.x conta…6.5
• CVE-2024-49603Dell PowerScale OneFS Versions 8.2.2.x through 9.9.0.x conta…6.5
• CVE-2024-49604Authentication Bypass Using an Alternate Path or Channel vul…9.8
• CVE-2024-49605Cross-Site Request Forgery (CSRF) vulnerability in Stefan No…6.1