# Exploit Title: Sistem Informasi Pengumuman Kelulusan Online 1.0 - Cross-Site Request Forgery (Add Admin) # Google Dork: N/A # Date: 2020-06-10 # Exploit Author: Extinction # Vendor Homepage: https://adikiss.net/ # Software Link: https://adikiss.net/2014/06/aplikasi-sistem-informasi-pengumuman-kelulusan-online-2/ # Version: latest # Tested on: Linux,windows,macOS # Description SpearSecurity : # CSRF vulnerability was discovered in Sistem kelulusan. # With this vulnerability, authorized users can be added to the system. POC:




CODED BY SPEAR-SECURITY

Author Extinction

#SpearSecurity-ID