HexBrain
Open on HackerOneSign in

delight.im · Report #267865

Add movie or series CSRF

N/Astatus
mediumseverity
4upvotes
3 Oct 2017disclosed

How it was found

Hello, I Found Cross-Site Request Forgery (CSRF) while adding new movie or series .

Reproduction:

  • Login by any user.
  • Add [Name],[YEAR] and [STRING] for the movie in poc .

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original