Comtrend CT 5361T Cross Site Request Forgery / Cross Site Scripting

Author: TUNISIAN CYBER + Exploit Title: Comtrend CT 5361T Multiple Vulnerabilities + Date: 21-04-2014 + Category: WebApp + CVE:CVE-2014-2923 CVE-2014-2924 + Tested on: Windows 7 Pro + Vendor: http://www.comtrend.com/ + Product:...

COMTREND CT-5361T Router - Password.cgi Cross-Site Request Forgery (Admin Password Manipulation)

COMTREND CT-5361T Router - Password.cgi Cross-Site Request Forgery Admin Password Manipulation source: https://www.securityfocus.com/bid/67033/info Comtrend CT-5361T ADSL Router is prone to a cross-site scripting vulnerability and a cross-site request-forgery vulnerability. An attacker can exploi...

COMTREND CT-5361T Router - 'Password.cgi' Cross-Site Request Forgery (Admin Password Manipulation)

source: https://www.securityfocus.com/bid/67033/info Comtrend CT-5361T ADSL Router is prone to a cross-site scripting vulnerability and a cross-site request-forgery vulnerability. An attacker can exploit these vulnerabilities to execute arbitrary script code in the browser of an unsuspecting user...

Comtrend CT 5361T Password Disclosure Vulnerability

Exploit for hardware platform in category web applications + Author: TUNISIAN CYBER + Exploit Title: Comtrend CT 5361T Password Disclosure Vulnerability + Date: 07-04-2014 + Category: WebApp + Tested on: Windows 7 Pro + Vendor: http://www.comtrend.com/ + Product:...

Comtrend CT 5361T Password Disclosure

Author: TUNISIAN CYBER + Exploit Title: Comtrend CT 5361T Password Disclosure Vulnerability + Date: 07-04-2014 + Category: WebApp + Tested on: Windows 7 Pro + Vendor: http://www.comtrend.com/ + Product:...

COMTREND CT-5624 Router - RootSupport Password DisclosureChange

COMTREND CT-5624 Router - RootSupport Password DisclosureChange !/usr/bin/perl + Comtrend Router CT-5624 Remote Root/Support Password Disclosure/Change Exploit Author: Todor Donev Email: todor.donev@@gmail Type: Hardware Vuln Type: Remote Tested: Board ID : CT-5624 Software : A011-306TSR-C01R03...

COMTREND CT-5624 Router - Root/Support Password Disclosure/Change

!/usr/bin/perl + Comtrend Router CT-5624 Remote Root/Support Password Disclosure/Change Exploit Author: Todor Donev Email: todor.donev@@gmail Type: Hardware Vuln Type: Remote Tested: Board ID : CT-5624 Software : A011-306TSR-C01R03 Bootloader : 1.0.37-0.7-3 ADSL : A2pB022c3.d20e Board ID : CT-563...

Comtrend Router CT-5624 Remote Root Password Changer/Disclosure

!/usr/bin/perl + Comtrend Router CT-5624 Remote Root/Support Password Disclosure/Change Exploit Author: Todor Donev Email: todor.donev@@gmail Type: Hardware Vuln Type: Remote Tested: Board ID : CT-5624 Software : A011-306TSR-C01R03 Bootloader : 1.0.37-0.7-3 ADSL : A2pB022c3.d20e Board ID : CT-563...

Comtrend Router CT-5624 Remote Root/Support Password Disclosure

Exploit for hardware platform in category web applications !/usr/bin/perl + Comtrend Router CT-5624 Remote Root/Support Password Disclosure/Change Exploit Author: Todor Donev Email: email protected@gmail Type: Hardware Vuln Type: Remote Tested: Board ID : CT-5624 Software : A011-306TSR-C01R03...

Comtrend ADSL Router CT-5367 C01_R12 Remote Root

Exploit for hardware platform in category remote exploits /COMTREND ADSL Router BTCVivaCom CT-5367 C01R12 Remote Root ============================================================================= Board ID : 96338A-122 Software : A111-312BTC-C01R12 Bootloader : 1.0.37-12.1-1 Wireless Driver :...

COMTREND ADSL Router CT-5367 C01_R12 - Remote Code Execution

COMTREND ADSL Router CT-5367 C01R12 - Remote Code Execution /COMTREND ADSL Router BTCVivaCom CT-5367 C01R12 Remote Root ============================================================================= Board ID : 96338A-122 Software : A111-312BTC-C01R12 Bootloader : 1.0.37-12.1-1 Wireless Driver :...

Comtrend ADSL Router BTC (VivaCom) Cross Site Request Forgery

/COMTREND ADSL Router BTCVivaCom CT-5367 C01R12 Remote Root ============================================================================= Board ID : 96338A-122 Software : A111-312BTC-C01R12 Bootloader : 1.0.37-12.1-1 Wireless Driver : 4.170.16.0.cpe2.1sd ADSL : A2pB023k.d20krc2...

CVE-2010-0470

Cross-site scripting XSS vulnerability in scvrtsrv.cmd in Comtrend CT-507IT ADSL Router allows remote attackers to inject arbitrary web script or HTML via the srvName parameter...

CVE-2010-0470

CVE-2010-0470 describes a stored/reflected cross-site scripting (XSS) vulnerability in the scvrtsrv.cmd interface of the Comtrend CT-507IT ADSL Router, allowing remote attackers to inject arbitrary web script or HTML via the srvName parameter. The cited sources (NVD and Red Hat, among others) con...

CVE-2010-0470

Cross-site scripting XSS vulnerability in scvrtsrv.cmd in Comtrend CT-507IT ADSL Router allows remote attackers to inject arbitrary web script or HTML via the srvName parameter...

CVE-2010-0470: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in scvrtsrv.cmd in Comtrend CT-507IT ADSL Router allows remote attackers to inject arbitrary web script or HTML via the srvName parameter...

COMTREND CT-507 IT ADSL Router - 'scvrtsrv.cmd' Cross-Site Scripting

source: https://www.securityfocus.com/bid/38004/info Comtrend CT-507 IT is prone to a cross-site scripting vulnerability because the device's web interface fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...

COMTREND CT-507 IT ADSL Router - scvrtsrv.cmd Cross-Site Scripting

COMTREND CT-507 IT ADSL Router - scvrtsrv.cmd Cross-Site Scripting source: https://www.securityfocus.com/bid/38004/info Comtrend CT-507 IT is prone to a cross-site scripting vulnerability because the device's web interface fails to properly sanitize user-supplied input. An attacker may leverage...

Comtrend ADSL Router Cross Site Scripting

Exploit Title: XSS in cpanel of Comtrend ADSL Router Date: 23-1-2010 Author: Yoyahack Software: Comtrend Version: CT-507IT / XSS in the control panel Comtrend ADSL Router / / Autor: Yoyahack Site: undersecurity.net / Exploit:...

Comtrend HG536+ Privilege Escalation

Comtrend HG536+ vulnerabilities Vendor url:www.comtrend.com Advisore Url:http://lostmon.blogspot.com/2009/04/ comtrend-hg536-vulnerabilities.html Vendor notify: NO Description By vendor The HG536+ is an 802.11g 54Mbps wireless and wired Local Area Network WLAN ADSL router. Four 10/100 Base-T...