CVE-2008-6729

Multiple cross-site request forgery CSRF vulnerabilities in password.php in PHPmotion 2.1 and earlier allow remote attackers to hijack the authentication of arbitrary users for requests that modify an account via the 1 password or 2 emailaddress parameter...

PHPmotion 2.1 Cross Site Request Forgery

PHPmotion Source of pwned.html file: Once your victim has visited your evil page, You may now be able to log...