{"uuid": "678e4d4e-127c-45b5-8f63-236f98cac816", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-2049", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/dlink_dcs931l_upload.rb", "content": "{\"aliases\": [], \"arch\": \"mipsle\", \"author\": [\"Mike Baucom\", \"Allen Harper\", \"J. Rach\", \"bcoles \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits a file upload vulnerability in D-Link DCS-931L\\n          network cameras. The setFileUpload functionality allows authenticated\\n          users to upload files to anywhere on the file system, allowing system\\n          files to be overwritten, resulting in execution of arbitrary commands.\\n          This module has been tested successfully on a D-Link DCS-931L with\\n          firmware versions 1.01_B7 (2013-04-19) and 1.04_B1 (2014-04-21).\\n          D-Link DCS-930L, DCS-932L, DCS-933L models are also reportedly\\n          affected, but untested.\", \"disclosure_date\": \"2015-02-23\", \"fullname\": \"exploit/linux/http/dlink_dcs931l_upload\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:54:55 +0000\", \"name\": \"D-Link DCS-931L File Upload\", \"needs_cleanup\": true, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/linux/http/dlink_dcs931l_upload.rb\", \"platform\": \"Linux\", \"post_auth\": true, \"rank\": 500, \"ref_name\": \"linux/http/dlink_dcs931l_upload\", \"references\": [\"CVE-2015-2049\", \"URL-https://tangiblesecurity.com/index.php/announcements/tangible-security-researchers-notified-and-assisted-d-link-with-fixing-critical-device-vulnerabilities\", \"URL-http://securityadvisories.dlink.com/security/publication.aspx?name=SAP10049\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"Linux mipsle Payload\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:48:29.851422Z"}