Pligg CMS 2.0.0rc2 – Cross-Site Request Forgery (File Creation) - 体验盒子

作者： DaOne

日期： 2013-08-15

类别：

平台：

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

---------------------------------------------------

# Exploit Title: Pligg CMS - CSRF Vulnerability

# Author: DaOne

# Vendor Homepage: http://pligg.com/

# Download link: https://github.com/Pligg/pligg-cms/archive/2.0.0rc2.zip

# Category: webapps/php

# Version: 2.0.0rc2 + old versions

---------------------------------------------------

-Create File by CSRF Exploit-

<html>

</form>

</body>

</html>

# Exploit-DB Note:

# If getting a Wrong Referrer error, use Live HTTP Headers or Tamper Date plugin

# to mitigate the issue.