code injection exploit on informir boxes

[Ryu]

switch to dreamlink, formuler or read below

https://research.checkpoint.com/we-decide-what-you-see-remote-code-execution-on-a-major-iptv-platform/

 

[dishuser]

I'll stick to using buzz

 

[Kimbo]

great info, thanks RYU!!

 

[Ryu]

thanks Laser

 

[zaang83]

LOL! Good info, thanks Ryu! !

 

[NEHPYX]

While it is not possible to know the exact number of those potentially exposed, Check Point Research discerned there to be over 1000 providers of this service with quite likely very high numbers of worldwide customers. As this vulnerability has been patched, we can now reveal what was involved.

Thats what they think and its not just this service!




there are SQL dumpers available to the public solving this task.

The `getAllVideoTasks` function executes an SQL query: