cve/2013/CVE-2013-2678.md

CVE-2013-2678

Description

Cisco Linksys E4200 1.0.05 Build 7 routers contain a Local File Include Vulnerability which could allow remote attackers to obtain sensitive information or execute arbitrary code by sending a crafted URL request to the apply.cgi script using the submit_type parameter.

POC

Reference

• http://packetstormsecurity.com/files/121551/Cisco-Linksys-E4200-Cross-Site-Scripting-Local-File-Inclusion.html
• http://packetstormsecurity.com/files/121551/Cisco-Linksys-E4200-Cross-Site-Scripting-Local-File-Inclusion.html
• http://www.exploit-db.com/exploits/25292
• http://www.exploit-db.com/exploits/25292

Github

No PoCs found on GitHub currently.