[ authorization ] [ registration ] [ restore account ]
Contact us
You can contact us by:
0day Today Exploits Market and 0day Exploits Database

GoldCoders Admin account change any information Vulnerability

[ 0Day-ID-23092 ]
Full title
GoldCoders Admin account change any information Vulnerability [ Highlight ]
Highlight - is paid service, that can help to get more visitors to your material.

Price: 10
Date add
Category
Platform
Verified
Price
 
0.001 BTC

 
50 USD
Risk
[
Security Risk High
]
Rel. releases
Description
In the most popular HYIP (investment program) script from the goldsoders completely absent protection CSRF vulnerability.
Usage info
Successful exploitation of this vulnerability requires to make a copy of the source code in any page settings from the admin panel and replace the fields, on the dates (password, name of the site, emeil, wallets) and add the java script code. If the administrator is logged in to the admin panel and enter the appropriate link, then all the necessary information will change quickly.
Vendor
http://goldcoders.com
Solution
Install CSRF protection
Tags
goldcoders     hyip     moneyscript  
Other Information
Abuses
0
Comments
10
Views
7 643
We DO NOT use Telegram or any messengers / social networks! We DO NOT use Telegram or any messengers / social networks! Please, beware of scammers!
Please login or register to buy exploit.
OR
Buy incognito
0
0
Verified by 0day Admin
Verified by 0day Admin
This material is checked by Administration and absolutely workable.
Learn more about    GOLD:
0day.today Gold is the currency of 0day.today project and is denoted on this site as such image: . It used for paying for the services, buying exploits, earning money, etc
We accept:
BitCoin (BTC)
You can pay us via BTC
LiteCoin (LTC)
You can pay us via LTC
Ethereum (ETH)
You can pay us via ETH

Author
BL
29
Exploits
1
Readers
1
[ Comments: 10 ]
Terms of use of comments:
  • Users are forbidden to exchange personal contact details
  • Haggle on other sites\projects is forbidden
  • Reselling is forbidden
Punishment: permanent block of user account with all Gold.

Login or register to leave comments