CVEs-PoC/2014/CVE-2014-2962.md

CVE-2014-2962

Description

Absolute path traversal vulnerability in the webproc cgi module on the Belkin N150 F9K1009 v1 router with firmware before 1.00.08 allows remote attackers to read arbitrary files via a full pathname in the getpage parameter.

POC

Reference

• http://www.kb.cert.org/vuls/id/774788
• https://www.exploit-db.com/exploits/38488/

Github

• https://github.com/20142995/nuclei-templates
• https://github.com/ARPSyndicate/kenzer-templates