Default credentials

An issue was discovered on D-Link DIR-601 2.02NA devices. Being local to the network and having only "User" account which is a low privilege account access, an attacker can intercept the response from a POST request to obtain "Admin" rights due to the admin password being displayed in XML...

CVE-2018-12710

An issue was discovered on D-Link DIR-601 2.02NA devices. Being local to the network and having only "User" account which is a low privilege account access, an attacker can intercept the response from a POST request to obtain "Admin" rights due to the admin password being displayed in XML...

DamiCMS Cross-Site Request Forgery Vulnerability (CNVD-2018-16532)

DamiCMS is a content management system CMS for building websites quickly. A cross-site request forgery vulnerability exists in DamiCMS version 6.0.0. A remote attacker can exploit this vulnerability to change the password of the administrator account with the help of the /admin.php?s=/Admin/doedi...

fledrCMS Cross-Site Request Forgery Vulnerability

fledrCMS is a lightweight, responsive PHP-based content management system CMS. A cross-site request forgery vulnerability exists in fledrCMS 2014-02-03 and earlier versions. A remote attacker can exploit this vulnerability to change the administrator password with the help of the...

CVE-2018-15844

An issue was discovered in DamiCMS 6.0.0. There is an CSRF vulnerability that can revise the administrator account's password via /admin.php?s=/Admin/doedit...

Cross site request forgery (csrf)

An issue was discovered in fledrCMS through 2014-02-03. There is a CSRF vulnerability that can change the administrator's password via index.php?p=done&savedata=1...

CVE-2018-15846

An issue was discovered in fledrCMS through 2014-02-03. There is a CSRF vulnerability that can change the administrator's password via index.php?p=done&savedata=1...

CVE-2018-15748

On Dell 2335dn printers with Printer Firmware Version 2.70.05.02, Engine Firmware Version 1.10.65, and Network Firmware Version V4.02.152335dn MFP 11-22-2010, the admin interface allows an authenticated attacker to retrieve the configured SMTP or LDAP password by viewing the HTML source code of t...

CVE-2018-14078

Wi2be SMART HP WMT R1.2.20201400922 allows unauthorized remote attackers to reset the admin password via the /ConfigWizard/ChangePwd.esp?2admin URL Attackers can login using the "admin" username with password "admin" after a successful attack...

Default credentials

Wi2be SMART HP WMT R1.2.20201400922 allows unauthorized remote attackers to reset the admin password via the /ConfigWizard/ChangePwd.esp?2admin URL Attackers can login using the "admin" username with password "admin" after a successful attack...

CVE-2018-14078

The CVE-2018-14078 entry affects Wi2be SMART HP WMT R1.2.20_201400922. The vulnerability allows unauthorized remote attackers to reset the admin password via the /ConfigWizard/ChangePwd.esp?2admin URL, enabling login with username “admin” and password “admin” after a successful attack. CVSS detai...

PT-2018-3889 · D Link · D-Link Dir-601

Name of the Vulnerable Software and Affected Versions: D-Link DIR-601 version 2.02NA Description: An issue allows an attacker with low privilege "User" account access to intercept the response from a POST request and obtain "Admin" rights due to the admin password being displayed in XML. The...

Intelbras Win 240 Cross-Site Scripting Vulnerability

The Intelbras Win 240 is a wireless router from Intelbras Brazil. A cross-site scripting vulnerability exists in Intelbras Win 240 version 1.1.0. A remote attacker can exploit the vulnerability to change the Admin password...

CVE-2018-10369

A Cross-site scripting XSS vulnerability was discovered on Intelbras Win 240 V1.1.0 devices. An attacker can change the Admin Password without a Login...

CVE-2018-10369

A Cross-site scripting XSS vulnerability was discovered on Intelbras Win 240 V1.1.0 devices. An attacker can change the Admin Password without a Login...

Cross site scripting

A Cross-site scripting XSS vulnerability was discovered on Intelbras Win 240 V1.1.0 devices. An attacker can change the Admin Password without a Login...

CVE-2018-10369

A Cross-site scripting XSS vulnerability was discovered on Intelbras Win 240 V1.1.0 devices. An attacker can change the Admin Password without a Login...

CVE-2018-0391

A vulnerability in the password change function of Cisco Prime Collaboration Provisioning could allow an authenticated, remote attacker to cause the system to become inoperable. The vulnerability is due to insufficient validation of a password change request. An attacker could exploit this...

CVE-2016-5649

A vulnerability is in the 'BSWcxttongr.htm' page of the Netgear DGN2200, version DGN2200-V1.0.0.507.0.50, and DGND3700, version DGND3700-V1.0.0.171.0.17, which can allow a remote attacker to access this page without any authentication. When processed, it exposes the admin password in clear text...

CVE-2016-5649

A vulnerability is in the 'BSWcxttongr.htm' page of the Netgear DGN2200, version DGN2200-V1.0.0.507.0.50, and DGND3700, version DGND3700-V1.0.0.171.0.17, which can allow a remote attacker to access this page without any authentication. When processed, it exposes the admin password in clear text...