CVE-2017-8835

Related Files

Peplink Balance Routers SQL Injection

Posted Aug 31, 2024

Authored by Redouane Niboucha, X41 D-Sec GmbH | Site metasploit.com

Firmware versions up to 7.0.0-build1904 of Peplink Balance routers are affected by an unauthenticated SQL injection vulnerability in the bauth cookie, successful exploitation of the vulnerability allows an attacker to retrieve the cookies of authenticated users, bypassing the web portal authentication. By default, a session expires 4 hours after login (the setting can be changed by the admin), for this reason, the module attempts to retrieve the most recently created sessions.

tags | exploit, web, sql injection

advisories | CVE-2017-8835

SHA-256 | b41d992081cc2b6eb2a8f48d7b8d7bae6acdc73882499f0a6250e5da83246835

Download | Favorite | View

Peplink 7.0.0-build1904 XSS / CSRF / SQL Injection / File Deletion

Posted Jun 5, 2017

Authored by Eric Sesterhenn, Claus Overbeck

Peplink version 7.0.0-build1904 suffers from cross site request forgery, cross site scripting, file deletion, and remote SQL injection vulnerabilities.

tags | exploit, remote, vulnerability, xss, sql injection, csrf

advisories | CVE-2017-8835, CVE-2017-8836, CVE-2017-8837, CVE-2017-8838, CVE-2017-8839, CVE-2017-8840, CVE-2017-8841

SHA-256 | a35c1582b7882363268493dd6fbe070be8641b56ca33272bfb77a7e2594c12ff

Download | Favorite | View