Full title: iBall 150M Wireless-N ADSL2+ Router Authentication Bypass Vulnerability 
Category: web applications
Platform: hardware
The CGI script used in the iBall 150M Wireless-N ADSL2+ router does not validate credentials. Hence any page in the router can be directly accessed by replacing page extension with .cgi.

# 0day.today @ http://0day.today/