发布 2011-02-08 漏洞条目

dotProject 2.1.5 – Cross-Site Request Forgery

Exploit Source

Source: http://packetstormsecurity.org/files/view/98245/dotProject2.1.5-xsrf.txt

<!------------------------------------------------------------------------

# Software................dotProject 2.1.5

# Vulnerability...........Cross-site Request Forgery

# Download................http://sourceforge.net/projects/dotproject/

# Release Date............2/2/2011

# Tested On...............Windows Vista + XAMPP

# ------------------------------------------------------------------------

# Author..................AutoSec Tools

# Site....................http://www.autosectools.com/

# ------------------------------------------------------------------------

# --Description--

# A cross-site request forgery vulnerability in dotProject 2.1.5 can be

# exploited to create a new admin.

# --PoC-->

<html>

</form>

</body>

</html>

相关漏洞条目