CMSQLite / CMySQLite 1.3 – Cross-Site Request Forgery - 体验盒子

作者： ADEO Security

日期： 2010-06-28

类别：

webapps

平台：

php

来源：https://www.exploit-db.com/exploits/14096/

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

31

32

# Title: CMSQlite & CMySQLite CSRF Vulnerability

# Author: ADEO Security

# Published: 28/06/2010

# Version: v1.3 >=

# Vendor: http://www.cmsqlite.net

# Description: "CMSQLite is a small, fast, flexible and complete Content-Management-System (CMS).

# It's perfect for freelancers, self-employeds, clubs and associations and small companies.

# CMSQLite is a CMS, basing on PHP and SQLite. That has many advantages!"

# Credit: Vulnerability founded by Canberk BOLAT at ADEO Security Labs (security@adeo.com.tr)

# Vulnerability: CMSQlite and CMySQLite have CSRF vulnerabilites in the admin panel.

# Attacker can change the password of the admin. For secure your web applications against

# CSRF vulnerabilities, look at this resources:

* OWASP-TR/WGT anticsurf Project - http://code.google.com/p/anticsurf/

* CSRF Prevention CS -

http://www.owasp.org/index.php/Cross-Site_Request_Forgery_%28CSRF%29_Prevention_Cheat_Sheet

# PoC:

<html>

<body>

</form>

</body>

</html>