# Exploit Title: Verizon Fios Router CSRF Admin Shell # Date: Discovered and reported January 2013 # Author: Jacob Holcomb/Gimppy - Security Analyst @ Independent Security Evaluators # Software: Verizon FIOS Router - Firmware 40.19.36 (http://verizon.com) # CVE: CVE-2013-0126 # Advisory/Video: http://infosec42.blogspot.com/2013/03/verizon-fios-router-csrf-cve-2013-0126.html US CERT Disclosure: http://www.kb.cert.org/vuls/id/278204 Exploit Code: HTML FILE #1

# Please sit tight while we upgrade your router

HTML FILE #2
Cisco Verizon FIOS CSRF2 - Add User w/ No Pass Confirmation
HTML FILE #3
Cisco Verizon FIOS CSRF3 - Enable Remote Administration