Lucene search
K

D-Link Administrative Password Disclosure

🗓️ 26 Jun 2019 00:00:00Reported by MartyType 
packetstorm
 packetstorm
🔗 packetstormsecurity.com👁 148 Views

D-Link models exposed, plain text admin password in web interface

Code
`The problem in the following models :  
  
DIR-652   
DIR-615   
DIR-827   
DIR-615   
DIR-657   
DIR-825   
  
If login to web interface as "User" or "user" , and navigate to url :   
  
http://<ip>:port/wizard_wan.asp   
  
in web code page:  
  
view-source:<ip>:port/wizard_wan.asp  
  
scroll down page and bang :  
  
administrator password in plain text  
  
ports : 8080 or 8081 .  
  
  
---  
Ta wiadomość została sprawdzona na obecność wirusów przez oprogramowanie antywirusowe Avast.  
https://www.avast.com/antivirus  
  
  
  
`

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation