Click here to Skip to main content
15,888,143 members
Please Sign up or sign in to vote.
0.00/5 (No votes)
See more:
Can you please help me to resolve CSRF issue found during using asp.net 2.0.

Issue description :

[1 of 3] Cross-Site Request Forgery
Severity: Medium
Test Type: Application
Vulnerable URL: https://somesite/somepage.aspx
Remediation Tasks: Decline malicious requests

Reasoning:
The same request was sent twice in different sessions and the same response was received.
This shows that none of the parameters are dynamic (session identifiers are sent only in
cookies) and therefore that the application is vulnerable to this issue.
Posted
Updated 28-May-11 18:22pm
v2
Comments
Dave Kreskowiak 29-May-11 0:22am    
Changed tags - this has nothing to do with VB.NET.

This content, along with any associated source code and files, is licensed under The Code Project Open License (CPOL)



CodeProject, 20 Bay Street, 11th Floor Toronto, Ontario, Canada M5J 2N8 +1 (416) 849-8900