what you don't know can hurt you

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

D-Link Central WiFi Manager CWM(100) Remote Code Execution

Posted Aug 18, 2020

Authored by M3 at ZionLab, Redouane Niboucha | Site metasploit.com

This Metasploit module exploits a PHP code injection vulnerability in D-Link Central WiFi Manager CWM(100) versions below v1.03R0100_BETA6. The vulnerability exists in the username cookie, which is passed to eval() without being sanitized. Dangerous functions are not disabled by default, which makes it possible to get code execution on the target.

tags | exploit, php, code execution

advisories | CVE-2019-13372

SHA-256 | ac0e25a36b1f650a673695023120501aef0392916303b8f4a0574daeb5e71a35

Download | Favorite | View

Related Files

No related files