TLR-2005KSH Arbitrary File Delete

Exploit Title: TLR-2005KSH - Arbitrary File Delete Date: 2022-05-11 Exploit Author: Ahmed Alroky Author Company : AIactive Version: 1.0.0 Vendor home page : http://telesquare.co.kr/ Authentication Required: No Tested on: Windows CVE: CVE-2021-46424 Proof-of-Concept Request DELETE /cgi-bin/test2.t...

CVE-2021-46424

The CVE-2021-46424 affects Telesquare TLR-2005KSH 1.0.0. A remote attacker can delete any file (including system files) via a DELETE request due to improper access control. Impact: data loss and potential system instability. Remediation: apply vendor patch/update per Nuclei/PacketStorm references...