============================================================================================================================================= | # Title : Giftora V 1.0 CSRF Vulnerability | | # Author : indoushka | | # Tested on : windows 10 Fr(Pro) / browser : Mozilla firefox 128.0.3 (64 bits) | | # Vendor : https://www.codester.com/items/12775/azon-dominator-affiliate-marketing-script | ============================================================================================================================================= poc : [+] Dorking İn Google Or Other Search Enggine. [+] The following HTML Add New posts . [+] Go to the line 10. Set the target site link Save changes and apply . [+] infected file : /admincp/new-post. [+] save code as poc.html [+] payload :

User Edit

[+] demo https://127.0.0.1/giftora.webister.net/blog Greetings to :============================================================ jericho * Larry W. Cashdollar * LiquidWorm * Hussin-X * D4NB4R * CraCkEr | ==========================================================================