Nate Drier

3 exploits Active since Aug 2013
CVE-2013-7247 EXPLOITDB WRITEUP
Franklin Fueling Systems TS-550 evo <2.4.0 - Info Disclosure
cgi-bin/tsaws.cgi in Franklin Fueling Systems TS-550 evo with firmware 2.0.0.6833 and other versions before 2.4.0 allows remote attackers to discover sensitive information (user names and password hashes) via the cmdWebGetConfiguration action in a TSA_REQUEST.
CVE-2013-4620 EXPLOITDB text WORKING POC
OpenEMR 4.1.1 - Cross-Site Scripting via Office Comments Note Parameter
Cross-site scripting (XSS) vulnerability in interface/main/onotes/office_comments_full.php in OpenEMR 4.1.1 allows remote attackers to inject arbitrary web script or HTML via the note parameter.
CVE-2013-7248 EXPLOITDB text WRITEUP
Franklin Fueling Systems TS-550 evo <2.4.0 - Privilege Escalation
Franklin Fueling Systems TS-550 evo with firmware 2.0.0.6833 and other versions before 2.4.0 has a hardcoded password for the roleDiag account, which allows remote attackers to gain root privileges, as demonstrated using a cmdWebCheckRole action in a TSA_REQUEST.