Mail.ru: Cross Site Request Forgery (CSRF)

Hello, I've Found CSRF in townwars.mail.ru/Gallery/addComment/ while any user can add image to townwars.mail.ru/Gallery/ after that any user can add comment to this image and here there is no any protection steps to reproduce - Go to townwars.mail.ru/Gallery/ - choose any photo - you can add a...