Linksys Cisco Wag120N CSRF Vulnerability

2011-02-25 Thread irancrash
Hardware : Linksys Cisco Wag120n(And perhaps similar versions) Type of vunlnerability : CSRF ( Change Admin Password And Add User ) Risk of use : High Producer Website

Re: Linksys Cisco Wag120N CSRF Vulnerability

2011-02-25 Thread tadeu1
I would like to recommend to people who want to test the code to disable/wipe out unnecessary options such as remote_management and http_wanport since they could give eventual outside attacker chances of authentication. Another doubt lies on the possibility that this code implictly relies on a