发布 2018-06-13 漏洞条目

MACCMS 10 – Cross-Site Request Forgery (Add User)

Exploit Source

# Exploit Title: MACCMS_V10 CSRF vulnerability add admin account

# Date: 2018-06-11

# Exploit Author: bay0net

# Vendor Homepage: https://www.cnblogs.com/v1vvwv/p/9168309.html

# Software Link: http://www.maccms.com/down.html

# Version: V10

# CVE : CVE-2018-12114

I found a CSRF vulnerability in maccms_v10,this vulnerability can be arbitrarily added to users.

The payload for attack is as follows.

<html>

<body>

</form>

</body>

</html>

相关漏洞条目