Intex Router N-150 – Arbitrary File Upload

• Exploit Database
• 125 阅读

• 作者： Samrat Das
  日期： 2018-06-25
• 类别：

  • webapps
  平台：

  • hardware
• 来源：https://www.exploit-db.com/exploits/44939/
• 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18

  # Exploit Title:​​ Intex Router N-150 - Arbitrary File Upload # Date: 2018-06-23 # Exploit Author: Samrat Das # Version: N-150 # CVE : N/A # Category: Router Firmware   # 1. Description # The firmware allows malicious files to be uploaded without any checking of # extensions and allows filed to be uploaded.   # 2. Proof of Concept   - Visit the application - Go to the advanced settings post login - Under backup- restore page upload any random file extension and hit go. - Upon the file being upload, the firmware will get rebooted accepting the arbitrary file.