Ref 1 Ref 2 2011-001 CSRF exploit/ex1 1.0