Cross-Site Request Forgery (CSRF) is caused by Multiple Functional design defects in the whole site of the site. The private message function can be used to affect more than 300 users)
Cross-Site Request Forgery (CSRF) is caused by Multiple Functional design defects in the whole site of the site. (The private message function can be used to affect more than 300 users of the whole site ).
Multiple poc files.
List of Multiple Functional design defects: (including but not limited)
The private message function of the website.
Click "Review" for a specified design file on the website.
All personal information is tampered.
1. Private Message POC:
<Html>
2. Comment on POC for designated Design Works of the website:
<Html>
3. All personal information is tampered with POC
<Html>
Attached proof of Personal Information tampering:
Before CSRF:
After CSRF:
Solution: 1. The verification code is considered to be the most concise and effective defense method against CSRF attacks.
2. Referer Check.
3. Anti CSRF Token.
Start building with 50+ products and up to 12 months usage for Elastic Compute Service
1 on 1 presale consultation
24/7 Technical Support 6 Free Tickets per Quarter Faster Response
Alibaba Cloud offers highly flexible support services tailored to meet your exact needs.
A comprehensive suite of global cloud computing services to power your business
Payment Methods We Support
