CSRF Vulnerability
Brought to you by:
lordlamer
Menu
▾
▴
#4 CSRF Vulnerability
This website is vulnerable to Cross Site Request Forgery attack. While the user is logged in, executing a form similar to that of the real “Change Password” form of the website, with the password explicitly given, would change the user’s password to the given password. The attack could be carried out by tricking the user to click a button that runs the malicious code, while the user is logged in to “Knowledge Root” will effectively change the user’s password what we want. The .php file that could be used for such an attack is attached. Running this file while the user is logged in would effectively change the user's password to "hacked2".
php file for the CSRF attack