CSRF test

This is a test for CSRF through the img tag.

edit: I guess it doesn't work here, but it does through the private messaging system o.O

Try it. PM yourself the following code.

(img)http://www.hellboundhackers.org/forum/viewthread.php?forum_id=23&thread_id=13431#116502(/img) Replace () with []

After viewing the message, the views for this thread will increase by one. This could possibly lead to greater threats.

[img]http://www.hellboundhackers.org/forum/csrf_test-23-13431_0.html[/img] edit: it does work. for every visit, the counter replays two.

Edit: doesn't work..

spyware wrote: Edit: doesn't work..

not to be rude but the pm csrf exploit does work. you have to replace the parenthesis in th code with brackets because if i used actual bracket it would just say "i dont think so" or something like that.

H4x0r_Z wrote: not to be rude but the pm csrf exploit does work. you have to replace the parenthesis in th code with brackets because if i used actual bracket it would just say "i dont think so" or something like that.

Ah, didn't notice the PM part. Well, anyway, this is an old bug and it'll get fixed soon, hopefully.

Emphasis on "hopefully" with maybe a "soon" added to the end ;)

If they haven't fixed the buddy list, the delete part is too.