CVE-2010-2039

gpEasy CMS versions 1.6.2, 1.6.1 and earlier are vulnerable to Cross-site request forgery (CSRF) that lets remote attackers hijack administrator sessions via an Admin_Users action to index.php and create new admin users. Root cause: CSRF in the administrative user-creation flow, enabling unauthor...

CVE-2010-2039

creationtimestamp| type| source ---|---|--- 2010-04-28 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/12441 2026-05-12 08:02:55+00:00| seen| https://t.me/GithubRedTeam/83903 2026-05-12 15:00:07+00:00| seen| Telegram/88YkBdmMMIAUjkN-cy3WAm2Yboedxaf0GfTYOA3KafU0qTc...