pierre Posted October 5, 2016 Share Posted October 5, 2016 Hello, I understand how CSRF works. If such a vulnerability is present on a profile.php page, a user could be trick into having his password changed by clicking on a milicious link. But what about the impact on a login.php page with a CSRF vulnerability ? Because there is no action possible on the page apart from fill the credentials.. Thanks Quote Link to comment Share on other sites More sharing options...
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.