Invoice Manager 3.1 - Cross-Site Request Forgery (Add Admin)

======================================================== Invoice Manager v3.1 Cross site request forgery Add Admin Description : Invoice Manager v3.1 is vulnerable to CSRF attack No CSRF token in place which if an admin user can be tricked to visit a crafted URL created by attacker via spear...

Invoice Manager 3.1 - Cross-Site Request Forgery (Add Admin)

Invoice Manager 3.1 - Cross-Site Request Forgery Add Admin ======================================================== Invoice Manager v3.1 Cross site request forgery Add Admin Description : Invoice Manager v3.1 is vulnerable to CSRF attack No CSRF token in place which if an admin user can be tricke...

Invoice Manager CSRF Vulnerability

Exploit for php platform in category web applications Exploit Title: Invoice Manager CSRF Author: Jonturk75 Vendor or Software Link: http://www.scripts.com/viewscript/invoice-manager-by-stivasoft/31738/ Category:: webapps Demo : http://www.phpjabbers.com/demo/im15/admin.php Greetz: Inj3ct0r Explo...