A high-risk GET csrf on Sohu Weibo can cause worms

GET can send Weibo !!!!! Weibo still inserts csrf images through packet capture !!! No need to click to view Weibo, it will automatically become a worm !!!!!
Detailed Description: The vulnerability exists in the micro-activity forwarding area. It was originally a POST request, but the GET method is also acceptable, so the damage instantly increases by a level.

Http://t.sohu.com/gy/twitter/support? Msg = csrf % 20by % 20vip & wgyId = 5313

In addition, images can only be uploaded at the original place, but you can modify it by capturing the package, loading the above address, and the microblog will automatically crawl.

First, upload any image.

Then, the Fiddler captures the packet and changes the address to the above.

Success !!!

 


In this way, we can see everything !!!

PS: Weibo has been deleted to prevent hazards.

 

Solution:

Important operations must be POST !!! You must have a token !!! Be sure to verify referer !!!