The CGI script used in the iBall 150M Wireless-N ADSL2+ router does not validate credentials. Hence any page in the router can be directly accessed by replacing page extension with .cgi.
4f6130f32632281e0a685611d0f071ae4329ca63096fc5c385e01cbcf5abc5fc