23 matches found
EUVD-2009-0396
Malware in sbrugna...
EUVD-2009-0397
Malware in sbrugna...
Irancell WIMAX Modem WIXFMM-130 CSRF Accounting User Password Viewer Vulnerability
Exploit for cgi platform in category web applications Exploit Title: Irancell WIMAX Modem WIXFMM-130 CSRF Accounting User Password Viewer Vendor Homepage: http://wimax.irancell.ir/Portal/Home/ Version: WIXFMM-130 Exploit : http://192.168.1.1/ajax.cgi?action=taginitwimaxauth.php Result :...
Cross site request forgery (csrf)
ajax.cgi in the web interface on the Choice Wireless Green Packet WIXFMR-111 4G WiMax modem allows remote attackers to obtain sensitive information via an Ajax 1 wmxState or 2 netState request...
CVE-2013-4731
ajax.cgi in the web interface on the Choice Wireless Green Packet WIXFMR-111 4G WiMax modem allows remote attackers to execute arbitrary commands via shell metacharacters in the pip parameter in an Ajax tagipPing request, a different vulnerability than CVE-2013-3581...
Cross site request forgery (csrf)
ajax.cgi in the web interface on the Choice Wireless Green Packet WIXFMR-111 4G WiMax modem allows remote attackers to execute arbitrary commands via shell metacharacters in the pip parameter in an Ajax tagipPing request, a different vulnerability than CVE-2013-3581...
CVE-2013-4731
ajax.cgi in the web interface on the Choice Wireless Green Packet WIXFMR-111 4G WiMax modem allows remote attackers to execute arbitrary commands via shell metacharacters in the pip parameter in an Ajax tagipPing request, a different vulnerability than CVE-2013-3581...
CVE-2013-4731
CVE-2013-4731 affects the Choice Wireless Green Packet WIXFMR-111 4G WiMax modem. The vulnerability is in the web interface’s ajax.cgi. It allows remote attackers to execute arbitrary commands by injecting shell metacharacters in the pip parameter of an Ajax tag_ipPing request. This is a distinct...
CVE-2013-3581
The CVE-2013-3581 entry affects the web interface of the Choice Wireless Green Packet WIXFMR-111 4G WiMax modem. The vulnerability lies in ajax.cgi where remote attackers can obtain sensitive information via Ajax requests (wmxState or netState). The provided documents describe the affected compon...
CVE-2013-3581
ajax.cgi in the web interface on the Choice Wireless Green Packet WIXFMR-111 4G WiMax modem allows remote attackers to obtain sensitive information via an Ajax 1 wmxState or 2 netState request...
CVE-2013-4731: Improper Authentication
ajax.cgi in the web interface on the Choice Wireless Green Packet WIXFMR-111 4G WiMax modem allows remote attackers to execute arbitrary commands via shell metacharacters in the pip parameter in an Ajax tagipPing request, a different vulnerability than CVE-2013-3581...
CVE-2013-3581: Improper Authentication
ajax.cgi in the web interface on the Choice Wireless Green Packet WIXFMR-111 4G WiMax modem allows remote attackers to obtain sensitive information via an Ajax 1 wmxState or 2 netState request...
Choice Wireless Green Packet 4G WiMax modem vulnerability
Overview Choice Wireless Green Packet 4G WiMax modem, model number WIXFMR-111, fails to properly validate ajax requests allowing a remote unauthenticated attacker to view system configuration information or possibly execute commands on the device. Description It has been reported that Choice...
P1 WiMAX Modem Default Credentials Unauthorized Access Vulnerability
This host has P1 WiMAX Modem and is prone default credentials unauthorized access vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-onl...
CVE-2009-0392
The CVE-2009-0392 issue affects Motorola Wimax modem CPEi300 (sysconf.cgi). The vulnerability arises from a directory traversal via the page parameter (".."), allowing remote authenticated users to read arbitrary files. CVSS shows a base score of 6.8 (MEDIUM) with network attack vector, low attac...
CVE-2009-0392: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in sysconf.cgi in Motorola Wimax modem CPEi300 allows remote authenticated users to read arbitrary files via a .. dot dot in the page parameter...
CVE-2009-0393: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in sysconf.cgi in Motorola Wimax modem CPEi300 allows remote authenticated users to inject arbitrary web script or HTML via the page parameter...
Motorola Wimax modem CPEi300 (FD/XSS) Multiple Vulnerabilities
No description provided by source. Name : Motorola Wimax modem CPEi300 Multiple Vulnerabilities Author : Usman Saeed Company : Xc0re Security Reasearch Group Homepage : http://www.xc0re.net Note: User needs to logged in! Attack type : Remote Patch Status : Unpatched Exploitation : + Directory...
Motorola Wimax Modem CPEi300 Multiple Vulnerabilities
Name : Motorola Wimax modem CPEi300 Multiple Vulnerabilities Author : Usman Saeed Company : Xc0re Security Reasearch Group Homepage : http://www.xc0re.net Note: User needs to logged in! Attack type : Remote Patch Status : Unpatched Exploitation : + Directory traversal...