Positron Broadcast Signal Processor TRA7005 version 1.20 5.1.6 suffers from a cross site request forgery vulnerability.