Planet VC-200M

Hello 3APA3A! Вот багу нашел, вендор откровенно тупит, похоже не хочет возится с прошивкой, по сему просьба опубликовать, может зачешутся... Planet VC-200M VDSL2 router Built in HTTP-server failure, if "Host:" header absent in HTTP-query. The further remote administration is impossible. Встроенны...

Unfixed XSS vulnerability at www.planet-source-code.com

Security researcher iNs uNkn0wn.eu CreW, has submitted on 02/10/2007 a cross-site-scripting XSS vulnerability affecting www.planet-source-code.com, which at the time of submission ranked 16329 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on...

gb03-db.txt

Discovered by:Aria-Security Team Type:Remote Password Disclosure Download: http://www.planet-source-code.com/vb/scripts/ShowCode.asp?lngWId=4&txtCodeId=6847 PoC: target/path/db/gbook.mdb target/path/db/gbook97.mdb Contact: [email protected]...

CVE-2006-3553

PlaNet Concept planetNews allows remote attackers to bypass authentication and execute arbitrary code via a direct request to news/admin/planetnews.php...

CVE-2006-3553

PlaNet Concept planetNews allows remote attackers to bypass authentication and execute arbitrary code via a direct request to news/admin/planetnews.php...

CVE-2006-3553: Undefined Security Weakness

PlaNet Concept planetNews allows remote attackers to bypass authentication and execute arbitrary code via a direct request to news/admin/planetnews.php...

CVE-2006-3553

The CVE-2006-3553 entry concerns PlaNet Concept planetNews. The vulnerability enables remote attackers to bypass authentication and execute arbitrary code via a direct request to news/admin/planetnews.php. This is the core flaw described in the public description. Connected documents do not suppl...

CVE-2006-2338

PlaNet Concept plaNetStat 20050127 allows remote attackers to gain administrative privileges, and view and configure log files, via a direct request to the 1 admin.php or 2 settings.php page...

Design/Logic Flaw

PlaNet Concept plaNetStat 20050127 allows remote attackers to gain administrative privileges, and view and configure log files, via a direct request to the 1 admin.php or 2 settings.php page...

CVE-2006-2338

PlaNet Concept plaNetStat 20050127 allows remote attackers to gain administrative privileges, and view and configure log files, via a direct request to the 1 admin.php or 2 settings.php page...

CVE-2006-2338

The CVE-2006-2338 issue affects PlaNet Concept plaNetStat (20050127). It allows remote attackers to gain administrative privileges and view/config log files by directly requesting admin.php or settings.php. The connected documents confirm the vulnerability details and impact; no remediation or ex...

planetSearch+ - XSS Vulnerabilities

planetSearch+ - XSS Vulnerabilities -------------------------------------------------------- Software: planetSearch+ Version: 26.10.2005 Type: Cross Site Scripting Vulnerability Date: Apr 13 20:44:54 CEST 2006 Vendor: PlaNet Concept e.K. Page: http://www.planetc.de Risc: Low credits:...

CVE-2005-3196

Planet Technology Corp FGSW2402RS switch with firmware 1.2 has a default password, which allows attackers with physical access to the device's serial port to gain privileges...

CVE-2005-3196

CVE-2005-3196 concerns the Planet Technology Corp FGSW2402RS switch running firmware 1.2, where a default password allows attackers with physical access to the device’s serial port to gain privileges. The affected component is the switch’s firmware authentication mechanism; the root cause is a de...

CVE-2005-3196

Planet Technology Corp FGSW2402RS switch with firmware 1.2 has a default password, which allows attackers with physical access to the device's serial port to gain privileges...

CVE-2005-3196: Undefined Security Weakness

Planet Technology Corp FGSW2402RS switch with firmware 1.2 has a default password, which allows attackers with physical access to the device's serial port to gain privileges...

Planet switches backdor account

There is undocumented 'admin' account with 'ISPMODE' password...

Planet Technology Corp FGSW2402RS switch default password / "backdoor"

Hello all, Today i discovered a pseudo backdoor thru a default password while trying to reset the password on a Planet Technology Corp FGSW2402RS switch. Allthough i dont consider this to be a real problem since the only access seems to be thru the serial port, i would like to share this with the...

Planet switches - 2 серия

Добрый день. Если помните, http://www.security.nnov.ru/search/news.asp?binid=3174 Та же "закладка" присутствует в Planet WSW-2401. Тот же пользователь, тот же пароль. Проблема усугубляется тем, что управляющий IP-интерфейс доступен через ЛЮБОЙ 802.1q-VLAN, присутствующий в свитче. Это касается и...

Planet WGSD-1020

Добрый день! Не знаю, может кто уже присылал... В свитчах Planet WGSD-1020 есть закладка. Пользователь superuser с паролем planet. В пользовательском интерфейсе он нигде не упоминается, но его видно в файле конфигурации кстати, несмотря на то, что файл конфигурации бинарный, имена и пароли там...