TOSHIBA e-Studio 232/233/282/283 – Cross-Site Request Forgery (Change Admin Password) - 体验盒子

作者： Hubert Gradek

日期： 2013-11-13

类别：

webapps

平台：

hardware

来源：https://www.exploit-db.com/exploits/29570/

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

# Exploit Title: TOSHIBA e-Studio 232/233/282/283 Change Admin Password CSRF Vulnerability

# Date: 02.10.2013

# Exploit Author: Hubert Gradek (PL)

# Affected version: firmware T377SY0EXXX

# Tested on: TOSHIBA e-Studio 232 (T377SY0E354) / 233 (T377SY0E331)

# CVE : No CVE exists - 0day exploit

Password must be minimum 6 digits!!!

login: Admin

EXPLOIT:

<html>

<H2>TOSHIBA e-Studio 232/233/282/283 Change Admin Password</H2>

</form>

</body>

</html>