vendor:
MicroCMS
by:
Besim
8,8
CVSS
HIGH
Cross-Site Request Forgery
352
CWE
Product Name: MicroCMS
Affected Version From: 3.9.5
Affected Version To: 3.9.5
Patch Exists: NO
Related CWE: N/A
CPE: a:apphp:microcms
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: PHP
2016
ApPHP MicroCMS 3.9.5 – Cross-Site Request Forgery (Add Admin (Main))
A Cross-Site Request Forgery (CSRF) vulnerability exists in ApPHP MicroCMS 3.9.5 which allows an attacker to add an admin user to the application. The attacker can craft a malicious HTML page containing a form with hidden fields that when visited by an authenticated user, will submit the form and add an admin user to the application. The form contains the parameters mg_prefix, mg_action, mg_rid, mg_sorting_fields, mg_sorting_types, mg_page, mg_operation, mg_operation_type, mg_operation_field, mg_search_status, mg_language_id, mg_operation_code, token, date_lastlogin, date_created, first_name, and last_name.
Mitigation:
The application should verify that the request is coming from an authenticated user and that the request is not coming from a malicious source.
