MKPortal M1.1.1 - 'Urlobox' Cross-Site Request Forgery

MkPortal Urlobox Cross Site Request Forgery Discovered by: Demential Web: http://www.burnhead.it E-mail: [email protected] Mkportal website: http://www.mkportal.it posting img?ind=urlobox&op=delete&idurlo=X/img in MkPortal urlobox where X is an ID of a message, when administrator opens urlobox pag...