Description Freebox OS Web interface 3.0.2 has CSRF which can allow VPN user account creation References http://packetstormsecurity.com/files/132121/FreeBox-3.0.2-Cross-Site-Request-Forgery-Cross-Site-Scripting.html http://www.securityfocus.com/bid/74936 http://seclists.org/fulldisclosure/2015/Jun/1