PHP Bookmarks is an application for managing bookmarks. It is written in PHP and back-ended by MySQL. It will run on most Linux and Unix variants. Vulnerable versions of PHP Bookmarks do not verify the origin of forms that are submitted by web users. This may allow an attacker to perform a form manipulation attack against the application. Exploitation of this issue requires that the attacker saves a form locally, uses a text editor to manipulate data in form elements, and then submits the manipulated form. It should be noted that PHP Bookmarks was not designed to be publicly accessible. However, the authors have implemented some security measures to enable a user to share their bookmarks via PHP Bookmarks, so some implementations may be vulnerable.
PHP Bookmarks is an application for managing bookmarks. It is written in PHP and back-ended by MySQL. It will run on most Linux and Unix variants. Vulnerable versions of PHP Bookmarks do not verify the origin of forms that are submitted by web users. This may allow an attacker to perform a form manipulation attack against the application. Exploitation of this issue requires that the attacker saves a form locally, uses a text editor to manipulate data in form elements, and then submits the manipulated form. It should be noted that PHP Bookmarks was not designed to be publicly accessible. However, the authors have implemented some security measures to enable a user to share their bookmarks via PHP Bookmarks, so some implementations may be vulnerable.