CVE:CVE-2013-5945
CNNVD:CNNVD-201312-319
D-Link DSR-250N等都是中国台湾友讯（D-Link）公司的产品。D-Link DSR-250N是一款统一服务路由器。D-link DSR-250是一款统一服务路由器。D-link DSR-500等都是中国友讯（D-link）公司的产品。D-link DSR-500是一款统一服务路由器。D-Link DSR-1000N是一个用于安全连接的客户端应用软件。
多款D-Link产品中存在SQL注入漏洞。攻击者可利用该漏洞在执行任意的SQL命令。以下产品及版本受到影响：使用1.08B44之前版本固件的D-Link DSR-150；使用1.05B64之前版本固件的DSR-150N；使用1.08B44之前版本固件的DSR-250和DSR-250N；使用1.08B77之前版本固件的DSR-500，DSR-500N，DSR-1000和DSR-1000N。
solution:Upgrade dlink dsr-150_firmware to a higher version than 1.08b44,and avoid the version (,1.08b44); Upgrade dlink dsr-150n_firmware to a higher version than 1.05b64,and avoid the version (,1.05b64); Upgrade dlink dsr-250_firmware to a higher version than 1.08b44,and avoid the version (,1.08b44); Upgrade dlink dsr-250n_firmware to a higher version than 1.08b44,and avoid the version (,1.08b44); Upgrade dlink dsr-500_firmware to a higher version than 1.08b77,and avoid the version (,1.08b77); Upgrade dlink dsr-500n_firmware to a higher version than 1.08b77,and avoid the version (,1.08b77); Upgrade dlink dsr-1000_firmware to a higher version than 1.08b77,and avoid the version (,1.08b77); Upgrade dlink dsr-1000n_firmware to a higher version than 1.08b77,and avoid the version (,1.08b77)