BugTraq
Back to list
|
Post reply
CSRF in Nuked Klan 1.7 SP4.2
Jun 29 2006 08:14AM
blwood skynet be
# Discovered by Blwood
# http://www.blwood.net
CSRF : Cross Site Request Forgery
If admin click on a link like this http://www.site.com/index.php?file=Admin&page=block&op=del_block&bid=X
Where X is an ID of a block
Block ID X will be destroyed...
Nuked Klan Website : http://www.nuked-klan.org/
[ reply ]
Privacy Statement
Copyright 2010, SecurityFocus
# http://www.blwood.net
CSRF : Cross Site Request Forgery
If admin click on a link like this http://www.site.com/index.php?file=Admin&page=block&op=del_block&bid=X
Where X is an ID of a block
Block ID X will be destroyed...
Nuked Klan Website : http://www.nuked-klan.org/
[ reply ]