EUVD-2012-1930

Malware in sbrugna...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in goform/admin/formWlEncrypt in Sitecom WLM-2501 allows remote attackers to hijack the authentication of administrators for requests that change the router passphrase via the pskValue parameter...

CVE-2012-1921

CVE-2012-1921: CSRF in Sitecom WLM-2501 (goform/admin/formWlEncrypt) allows remote attackers to hijack administrator authentication and change the router passphrase via the pskValue parameter. Affected device: Sitecom WLM-2501; vulnerable component: formWlEncrypt handler in goform. The entry list...

CVE-2012-1921

Cross-site request forgery CSRF vulnerability in goform/admin/formWlEncrypt in Sitecom WLM-2501 allows remote attackers to hijack the authentication of administrators for requests that change the router passphrase via the pskValue parameter...