Sprint / Verizon MiFi CSRF+CSS Gives up GPS info to attacker

The MiFi by Novatel Wireless re-branded and sold by multiple vendors such as Sprint and Verizon is a mobile wifi hotspot. The mifi also has a built in GPS to provide location based searching. Turns out that the web interface to this little device has a lot going on that can be exploited, from...