CVE-2012-1416

EPSS 1.1%

Multiple cross-site request forgery (CSRF) vulnerabilities in SocialCMS 1.0.2 allow remote attackers to hijack the authentication of administrators for requests that (1) add administrator accounts via a member_new action to my_admin/admin1_members.php or (2) modify the default site title via a save action to my_admin/admin1_configuration.php.

Affected products

n/a · n/a

public PoCs found — 4

cve_referencewww.exploit-db.com/exploits/17193unverified cve_referencewww.exploit-db.com/exploits/18487unverified exploitdbwww.exploit-db.com/exploits/18487unverified exploitdbwww.exploit-db.com/exploits/17193unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://secunia.com/advisories/44313 https://exchange.xforce.ibmcloud.com/vulnerabilities/66985 http://www.exploit-db.com/exploits/17193 http://www.exploit-db.com/exploits/18487 http://www.osvdb.org/71930