Missing ValidateAntiForgeryToken

[h3xstream]

Very simple pattern..

Vulnerable :

        [HttpPost]
        public ActionResult ControllerMethod(string input) {

            return null;
        }

Solution:

        [HttpPost]
        [ValidateAntiForgeryToken]
        public ActionResult ControllerMethod(string input) {

            return null;
        }