CVE-2025-14528 PoC — D-Link DIR-803 安全漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-14528.yaml

Associated Vulnerability

Title:D-Link DIR-803 安全漏洞 (CVE-2025-14528)
Description:D-Link DIR-803是中国友讯（D-Link）公司的一款无线路由器。 D-Link DIR-803 1.04及之前版本存在安全漏洞，该漏洞源于组件Configuration Handler的文件/getcfg.php中参数AUTHORIZED_GROUP的错误操作，可能导致信息泄露。

Description

An authentication bypass vulnerability exists in D-Link DIR-803 routers (firmware A1 1.04 and earlier). By manipulating the AUTHORIZED_GROUP parameter in /getcfg.php via newline injection, an attacker can retrieve XML configuration containing administrator credentials without authentication.

File Snapshot


 id: CVE-2025-14528

info:
  name: D-Link DIR-803 - Authentication Bypass
  author: DhiyaneshDk
  sev

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!