Kumar Saurav

3 exploits Active since Jan 2019
CVE-2019-6282 EXPLOITDB HIGH text WORKING POC
ChinaMobile GPN2.4P21-C-CN Firmware W2001EN-00 - Cross-Site Request Forgery via Wireless Security Page
ChinaMobile PLC Wireless Router GPN2.4P21-C-CN devices with firmware W2001EN-00 have CSRF via the cgi-bin/webproc?getpage=html/index.html subpage=wlsecurity URI, allowing an Attacker to change the Wireless Security Password.
CVSS 8.8
CVE-2019-6279 EXPLOITDB HIGH text WORKING POC
ChinaMobile PLC Wireless Router GPN2.4P21-C-CN - Privilege Escalation
ChinaMobile PLC Wireless Router GPN2.4P21-C-CN devices with firmware W2001EN-00 have an Incorrect Access Control vulnerability via the cgi-bin/webproc?getpage=html/index.html subpage=wlsecurity URI, allowing an Attacker to change the Wireless Security Password.
CVSS 8.8
CVE-2018-20326 EXPLOITDB MEDIUM text WORKING POC
ChinaMobile PLC Wireless Router - XSS
ChinaMobile PLC Wireless Router GPN2.4P21-C-CN devices with firmware W2001EN-00 have XSS via the cgi-bin/webproc?getpage=html/index.html var:subpage parameter.
CVSS 6.1