CVE-2013-3312: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in the Loftek Nexus 543 IP Camera allow remote attackers to hijack the authentication of unspecified victims for requests that change 1 passwords or 2 firewall configuration, as demonstrated by a request to setusers.cgi...