All web application platforms are potentially vulnerable to CSRF (Cross-Site Request Forgery) attacks. One way to prevent this sort of attack in an MVC application is to use an anti-forgery token.