D-Link DIR-655 C devices before 3.02B05 BETA03 allow CSRF for the entire management console.

Source