发布 2018-07-02 漏洞条目

DAMICMS 6.0.0 – Cross-Site Request Forgery (Add Admin)

Exploit Source

<!--

# Exploit Title: DAMICMS 6.0.0 - Cross-Site Request Forgery (Add Admin)

# Date: 2018-06-30

# Exploit Author: bay0net

# Vendor Homepage: https://www.cnblogs.com/v1vvwv/p/9248562.html

# Software Link: https://www.damicms.com/Down#

# Version: DAMICMS_V6.0.0

# CVE : N/A

# DamiCMS v6.0.0 allows CSRF via admin.php?s=/Admin/doadd to add an administrator account.

# The payload for attack is as follows.

-->

<html>

<body>

</form>

</body>

</html>

相关漏洞条目