explay-xssxsrf.txt

================================== Explay CMS 2. CSRF User can get admin rights if admin open malicious page that contain, for instance: or merely insert it to comment or article text...

Explay CMS 2.1 - Persistent Cross-Site Scripting / Cross-Site Request Forgery

================================== Explay CMS 2. CSRF User can get admin rights if admin open malicious page that contain, for instance: or merely insert it to comment or article text. milw0rm.com 2008-09-19...