| To: | bugtraq@securityfocus.com |
|---|---|
| Subject: | MkPortal Urlobox Cross Site Request Forgery |
| From: | info@burnhead.it |
| Date: | 19 Dec 2006 22:27:27 -0000 |
| Delivered-to: | sp-com-lists@consult.net |
| Delivered-to: | bugtraq-list@securepoint.com |
| Delivered-to: | mailing list bugtraq@securityfocus.com |
| Delivered-to: | moderator for bugtraq@securityfocus.com |
| List-help: | <mailto:bugtraq-help@securityfocus.com> |
| List-id: | <bugtraq.list-id.securityfocus.com> |
| List-post: | <mailto:bugtraq@securityfocus.com> |
| List-subscribe: | <mailto:bugtraq-subscribe@securityfocus.com> |
| List-unsubscribe: | <mailto:bugtraq-unsubscribe@securityfocus.com> |
| Mailing-list: | contact bugtraq-help@securityfocus.com; run by ezmlm |
MkPortal Urlobox Cross Site Request Forgery Discovered by: Demential Web: http://www.burnhead.it E-mail: info@burnhead.it Mkportal website: http://www.mkportal.it posting [img]?ind=urlobox&op=delete&idurlo=X[/img] in MkPortal urlobox where X is an ID of a message, when administrator opens urlobox page message X will be erased. |
| <Prev in Thread] | Current Thread | [Next in Thread> |
|---|---|---|
| ||
| Previous by Date: | Multiple Bugs in MINI WEB SHOP, xx_hack_xx_2004 |
|---|---|
| Next by Date: | RE: Cisco not honoring update promises?, Michael Scheidell |
| Previous by Thread: | Multiple Bugs in MINI WEB SHOP, xx_hack_xx_2004 |
| Next by Thread: | Re: MkPortal Urlobox Cross Site Request Forgery, securityfocus |
| Indexes: | [Date] [Thread] [Top] [All Lists] |