Adive Framework 2.0.7 – Cross-Site Request Forgery - 体验盒子

作者： Pablo Santiago

日期： 2019-08-08

类别：

webapps

平台：

php

来源：https://www.exploit-db.com/exploits/47217/

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

31

32

33

34

# Exploit Title: Adive Framework 2.0.7 – Cross-Site Request Forgery (CSRF)

# Date:02/08/2019.

# Exploit Author: Pablo Santiago

# Vendor Homepage: https://adive.es

# Software Link: https://github.com/ferdinandmartin/adive-php7

# Version: 2.0.7

# Tested on: Windows and Kali linux

# CVE :2019-14346

# 1. Technical Description:

# Adive Framework 2.0.7 and possibly before are affected by Cross-Site

#Request Forgery vulnerability, an attacker could change any user

password.

# 2. Proof Of Concept (CODE):

<html>

<body>

</form>

</body>

</html>

# 3. References:

# https://hackpuntes.com/cve-2019-14346-adive-framework-2-0-7-cross-site-request-forgery/

# https://imgur.com/apuZa9q