WBR-3406 Wireless Broadband NAT Router – Web-Console Password Change Bypass / Cross-Site Request Forgery - 体验盒子

作者： Yakir Wizman

日期： 2013-11-15

类别：

webapps

平台：

hardware

来源：https://www.exploit-db.com/exploits/29612/

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

# -----------------------------------------------------------

# WBR-3406 Wireless Broadband NAT Router Web-Console Password Change Bypass & CSRF Vulnerability

# This PoC code should do two main things:

# 1. Cross Site Request Forgery (For more information, just google it).

# 2. This code change to new password without know the current password.

# The vulnerability work in a way that if we remove the "PA=" parameter which is the current password

# the application ignore that and change the password without even entering the old / current password.

# Bug discovered by Pr0T3cT10n AKA Yakir Wizman, <yakir.wizman@gmail.com>

# Date 17/08/2012

# Vendor site - http://www.level1.com/

# ISRAEL

# -----------------------------------------------------------

# Author will be not responsible for any damage.

# -----------------------------------------------------------

# PoC EXPLOIT

# -----------------------------------------------------------

<html>

<body>

</form>

</body>

</html>

# -----------------------------------------------------------