AirTies Air5341 1.0.0.12 devices allow cgi-bin/login CSRF.
The web application does not, or cannot, sufficiently verify whether a request was intentionally provided by the user who sent the request, which could have originated from an unauthorized actor.
Link | Tags |
---|---|
https://alicangonullu.biz/konu/3 | not applicable |
https://www.exploit-db.com/exploits/46253/ | exploit vdb entry third party advisory |
http://packetstormsecurity.com/files/151372/AirTies-Air5341-Modem-1.0.0.12-Cross-Site-Request-Forgery.html | exploit vdb entry third party advisory |
https://twitter.com/alicangonullu | broken link |