Exploit in DD-WRT

[wpte]

just mentioning it:
http://www.youtube.com/watch?v=UhDcXCVFrvM

together with this one:
http://ha.ckers.org/blog/20090630/csrf-and-ignoring-basicdigest-auth/