| शीर्षक | Tosei TOSEI online store management system (aka TOSEIネット店舗管理システム) 4.02/4.03/4.04 Use of Weak Credentials |
|---|
| विवरण | Vendor:
Tosei (https://www.tosei-corporation.co.jp/)
Product:
TOSEI online store management system (aka TOSEIネット店舗管理システム)
Product documentation:
https://www.tosei-corporation.co.jp/pdf/manual/cl_current/OP_THS-300-WEB.pdf
Version:
4.02/4.03/4.04
Shodan Dorks:
http.favicon.hash:-244067125 http.html:Tosei
Impact:
Access to the management backend is permitted with the default admin username and password, and this account has the authority to modify the usage fees and discounts for specific self-service washing machines.
Attack vector:
The default admin username and password are both: contecfws01
Discoverer:
b0rgch3n (https://github.com/b0rgch3n) |
|---|
| स्रोत | ⚠️ https://gist.github.com/b0rgch3n/3136cad95b09e42184fb2d78aae33651 |
|---|
| उपयोगकर्ता | b0rgch3n (UID 72796) |
|---|
| सबमिशन | 06/08/2024 09:40 AM (2 साल पहले) |
|---|
| संयम | 16/08/2024 10:45 PM (11 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 274906 [Tosei Online Store Management System ネット店舗管理システム Backend दूरस्थ कोड निष्पादन] |
|---|
| अंक | 20 |
|---|