Freebox OS Web interface 3.0.2 has CSRF which can allow VPN user account creation
- http://packetstormsecurity.com/files/132121/FreeBox-3.0.2-Cross-Site-Request-Forgery-Cross-Site-Scripting.html
- http://seclists.org/fulldisclosure/2015/Jun/1
No PoCs found on GitHub currently.