NETDOIT weak password Vulnerability

2016.10.24
ir Ashiyane Digital Security Team (IR) ir
Risk: Medium
Local: No
Remote: Yes
CVE: N/A
CWE: N/A
Dork: intext:"Power by NETDOIT"

###################### # Exploit Title : NETDOIT weak password Vulnerability # Exploit Author : Ashiyane Digital Security Team # Vendor Homepage : http://web.net-doit.com/ # Google Dork : intext:"Power by NETDOIT" # Date: 2016 22 October # Tested On : Win 10 / Google Chrome / Mozilla Firefox # ###################### # # Search Google Dork and Choose a Target and put this after URL : /a/ or /m/ # and put this username & password : # username : admin # password : uwj5greygxrt # # Demos : # # http://www.jialung.com.tw/a/ # http://www.s2r.com.tw/m/ # http://www.mingjiann.com.tw/a/ # http://www.jiayin.com.tw/a/ # http://www.master-new.com.tw/a/ # http://www.haoda.com.tw/a/ # http://www.dcbox.com.tw/m/ # http://www.iweb11.ieshop.tw/m/ # http://www.ieshop.tw/m/ # http://www.web.net-doit.com/m/ # http://www.iweb49.ieshop.tw/m/ # http://www.bon-tech.com.tw/m/ # http://www.newtaipei.lifeinfo.tw/m/ ###################### # discovered by : modiret ######################


See this note in RAW Version
Vote for this issue:
50%
50%


 

Thanks for you vote!


 

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.


(*) - required fields.  
{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1
{{ x.comment }}
Copyright 2024, cxsecurity.com

 

Back to Top