发布 2013-08-15 漏洞条目

Pligg CMS 2.0.0rc2 – Cross-Site Request Forgery (File Creation)

Exploit Source

---------------------------------------------------

# Exploit Title: Pligg CMS - CSRF Vulnerability

# Author: DaOne

# Vendor Homepage: http://pligg.com/

# Download link: https://github.com/Pligg/pligg-cms/archive/2.0.0rc2.zip

# Category: webapps/php

# Version: 2.0.0rc2 + old versions

---------------------------------------------------

-Create File by CSRF Exploit-

<html>

</form>

</body>

</html>

# Exploit-DB Note:

# If getting a Wrong Referrer error, use Live HTTP Headers or Tamper Date plugin

# to mitigate the issue.

相关漏洞条目