#(+) Exploit Title: WatchDek Social Networking XSRF Vulnerability (Force Delete Victim Inbox) #(+) Author : ^Xecuti0n3r #(+) Date : 7.04.2011 #(+) Hour : 13:37 PM #(+) E-mail : xecutioner()yahoo.com #(+) Category : Web Apps [XSRF] #(+) App website: watchdek.com #All you have to do is save the below code as exploit.html #Then Host a website with the exploit.html file. Any person who visits the website # will see that all the messages in his watchdek inbox is deleted without warning ;) ____________________________________________________________________ ____________________________________________________________________ Code: