in reply to Re: Need help figure out CSRF vulnerability on this cgi code
in thread Need help figure out CSRF vulnerability on this cgi code

Wherever you take in input from the internet, and output it directly as HTML, you have a CSRF.

you also have XSS or Cross-site scripting

  • Comment on Re^2: Need help figure out CSRF vulnerability on this cgi code