TUCoPS :: HP Unsorted C :: b06-3363.htm

nuked klan 1.7 sp4.2 Csrf
CSRF in Nuked Klan 1.7 SP4.2
CSRF in Nuked Klan 1.7 SP4.2



# Discovered by Blwood
# http://www.blwood.net

CSRF : Cross Site Request Forgery

If admin click on a link like this http://www.site.com/index.php?file=Admin&page=block&op=del_block&bid=X

Where X is an ID of a block

Block ID X will be destroyed...


Nuked Klan Website : http://www.nuked-klan.org/ 

TUCoPS is optimized to look best in Firefox® on a widescreen monitor (1440x900 or better).
Site design & layout copyright © 1986-2024 AOH