D-Link DIR-300 firmware <=REVA1.06 and <=REVB2.06 is vulnerable to File inclusion via /model/__lang_msg.php.
- https://www.dlink.com/en/security-bulletin/
No PoCs found on GitHub currently.