Monstra-Dev 3.0.4 – Cross-Site Request Forgery (Account Hijacking) - 体验盒子

作者： Nainsi Gupta

日期： 2018-08-07

类别：

webapps

平台：

php

来源：https://www.exploit-db.com/exploits/45164/

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

31

32

33

34

35

36

37

38

39

40

41

42

# Exploit Title: Monstra-Dev 3.0.4 - Cross-Site Request Forgery(Account Hijacking)

# Date: 2018-08-04

# Exploit Author: Nainsi Gupta

# Vendor Homepage: http://monstra.org/

# Product Name: Monstra-dev

# Version: 3.0.4

# Tested on: Windows 10 (Firefox/Chrome)

# CVE : N/A

# 1. Description

# CSRF vulnerability in admin/user/edit in Monstra-dev 3.0.4 allows an attacker

# to take over a user account by modifying user's data such as email and password

# 2. Exploit and Proof of Concept

# To exploit this vulnerability, victim need to be logged in at target site namely

# victim.com and visit crafted site made by attacker namely attacker.com.

# Then an authenticated POST request will be generated from victim browser and it will

# be submit to victim.com to modify user's data to attacker desired value.

#POC:CSRF

<html>

<body>

</form>

</body>

</html>