Description Cognitoys Dino devices allow profiles_add.html CSRF. References https://www.pentestpartners.com/security-blog/jurassic-poke-hacking-a-dino-toy/