Wordpress All Version ~ XSRF Vuln. | Cyber-Warrior Information Technology's World

Root > Exploits / Vulnerabilities > Wordpress All Version ~ XSRF Vuln.

Madde
	Author : Bug Researchers/Aras, Samet.
	Date : 12.07.2009 21:10:37
	# Wordpress All Version ~ XSRF Vuln. [Full Screen Display]

	<------------------- header data start ------------------- > ############################################################# # author * Aras, Samet. # Script Name : Wordpress (tüm sürümleri) # Download : http://wordpress.org/download/ # Bug Type : XSRF # Infection : FEED degistirici # Bug Fix Advice : Form’a Oturum Key’i (Session Token) eklenmelidir. ############################################################# < ------------------- header data end of ------------------- > < -- bug code start -- > http://www.bilgesayfa.com/wp-exploit.txt Arkadaslar; Söyle bir uygulama da yapabiliriz: Bir script ile, wp-admin içeriginin kaynak kodunu aliriz. Kaynagin içerisinden oturum key’ini (_wpnonce), XSRF’nin form alanina ekleriz. Böylece, XSRF’nin önündeki engel kalkacaktir. < -- bug code end of -- >