in reply to Re: Need help figure out CSRF vulnerability on this cgi code
in thread Need help figure out CSRF vulnerability on this cgi code
Wherever you take in input from the internet, and output it directly as HTML, you have a CSRF.
you also have XSS or Cross-site scripting
|
|---|