Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in administration.cgi on the Cisco Linksys WRT54GC router with firmware 1.05.7 allows remote attackers to hijack the intranet connectivity of arbitrary users for requests that change the administrator password via the sysPasswd and sysConfirmPasswd...

CVE-2009-1561

Cross-site request forgery CSRF vulnerability in administration.cgi on the Cisco Linksys WRT54GC router with firmware 1.05.7 allows remote attackers to hijack the intranet connectivity of arbitrary users for requests that change the administrator password via the sysPasswd and sysConfirmPasswd...

Linksys WRT54GC 'administration.cgi'访问验证漏洞

BUGTRAQ ID: 34616 CNCAN ID：CNCAN-2009042103 Linksys WRT54GC是一款无线路由器设备。 Linksys WRT54GC存在输入验证问题，远程攻击者可以利用漏洞未授权访问设备。 对管理.cgi文件缺少正确的验证处理，提交密码更改等POST请求，可导致未授权访问设备。 0 Linksys WRT54GC 1.5.7 Firmware 目前没有解决方案提供： a href=http://www.linksys.com/ target=blank rel=external nofollowhttp://www.linksys.com//a...