POST exploit in submit.php

[Prince781]

There is an exploit enabling anyone to send a POST request to submit.php via an unauthorized method, using basic Unix tools:

#!/bin/sh
function snakes_post_exploit() {
    # Use: snakes_post_exploit <username> <score> <level>
    curl -d "username=$1&score=$2&level=$3" http://dev.bumbuu.com/games/snakes/submit.php           
}

[Prince781]

I've checked and the exploit doesn't seem to work anymore. Can someone else confirm this?

[benwaffle]

still works:

#!/bin/sh
function snakes_post_exploit() {
    # Use: snakes_post_exploit <username> <score> <level>
    curl -# -b cookies -c cookies -d "username=$1&score=$2&level=$3" -o out http://dev.bumbuu.com/games/snakes/ http://dev.bumbuu.com/games/snakes/submit.php && rm cookies out           
}