Lucene search

K
securityvulnsSecurityvulnsSECURITYVULNS:DOC:13370
HistoryJun 30, 2006 - 12:00 a.m.

CSRF in Nuked Klan 1.7 SP4.2

2006-06-3000:00:00
vulners.com
3

Discovered by Blwood

http://www.blwood.net

CSRF : Cross Site Request Forgery

If admin click on a link like this
http://www.site.com/index.php?file=Admin&page=block&op=del_block&bid=X

Where X is an ID of a block

Block ID X will be destroyed…

Nuked Klan Website : http://www.nuked-klan.org/