CVE-2005-1059
Linksys WET11 1.5.4 - Unauthenticated Password Change via changepw.html Data Parameter
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2005-1059. PoCs published by Kristian Hermansen.
AI-analyzed exploit summary The exploit describes an authentication bypass vulnerability in Linksys WET11 devices, allowing an attacker to change the administration password without proper credential validation. The provided URL demonstrates the attack vector via a crafted request to the changepw.html endpoint.
Description
Linksys WET11 1.5.4 allows remote attackers to change the password without providing the original password via the data parameter to changepw.html.
Exploits (1)
The exploit describes an authentication bypass vulnerability in Linksys WET11 devices, allowing an attacker to change the administration password without proper credential validation. The provided URL demonstrates the attack vector via a crafted request to the changepw.html endpoint.