header-logo
Suggest Exploit
vendor:
by:
str0ke
3.3
CVSS
LOW
Form Action Manipulation
20
CWE
Product Name:
Affected Version From:
Affected Version To:
Patch Exists: NO
Related CWE:
CPE:
Metasploit:
Other Scripts:
Platforms Tested:

Form Action Manipulation

The form action attribute is manipulated to send form data to an external page.

Mitigation:

Validate and sanitize user input before using it to construct the form action URL.
Source

Exploit-DB raw data: