CSRF Web Vulnerabilities – Nikita Makeyev Submitted for BarCamp Memphis 2010

5. OR

6. performs an action upon a POST request

7. but doesn't differentiate between POST

10. a server action request and includes it as

11. a src of an image or a script on a bunch of

14. https://www.mybank.com/account.php ,

15. logs in and then happens to visit one of

18. https://www.mybank.com/account.php

19. every day and attempts to use the forgot

22. Site relying on user identity

23. Attacker able to find a form submission or a URL that performs action

26. No damage ceiling

27. The attack is silent

28. Easily mountable

31. Only use POST to initiate actions

32. Checking the HTTP Referrer header