[ authorization ] [ registration ] [ restore account ]
Contact us
You can contact us by:
0day Today Exploits Market and 0day Exploits Database

MKPortal M1.1.1 (Urlobox) Cross Site Request Forgery Vulnerability

Author
Demential
Risk
[
Security Risk Unsored
]
0day-ID
0day-ID-1287
Category
web applications
Date add
21-12-2006
Platform
unsorted
==================================================================
MKPortal M1.1.1 (Urlobox) Cross Site Request Forgery Vulnerability
==================================================================


MkPortal Urlobox Cross Site Request Forgery

Discovered by: Demential
Mkportal website: http://www.mkportal.it

posting [img]?ind=urlobox&op=delete&idurlo=X[/img] in MkPortal urlobox
where X is an ID of a message,
when administrator opens urlobox page message X will be erased.



#  0day.today [2024-10-06]  #