[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: Multiple XSRF in DD-WRT (Remote Root Command Execution)
- To: bugtraq@xxxxxxxxxxxxxxxxx
- Subject: Re: Multiple XSRF in DD-WRT (Remote Root Command Execution)
- From: dan.crowley@xxxxxxxxx
- Date: Wed, 10 Dec 2008 19:14:10 -0700
This doesn't look like an XRSF flaw to me, unless this html is supposed to be
inserted via some XRSF flaw, in which case you've given us a payload with no
vulnerability details and no PoC exploit.
Looks like someone from the DD-WRT team has also commented, denying that this
is actually a vulnerability.
If you have more details, please do post them.