We Done Been ... Framed

From what I gathered of the Opera unite stuff I read, it would be possible to issue server-server commands and chain sessions between each(?). I figured this could be twisted enough to make most authorizing protocols obsolete in light of framing the victims /server/.... dunno though, I was asking a genuine question to the community, I do that sometimes.... let's say for instance you frame/"clickjack" 129.168.0.10 which happens to be there router config page? could that actually be done and if so at what cost? do it on a large scale and you're bound to get the people who use their hotmail password for their router.... just winging it, but I thought it was worth learning about in open conversation