4 TOTOLINK router models suffer from cross site request forgery and cross site scripting vulnerabilities.