CVE-2019-13071

CSRF in the Agent/Center component of CyberPower PowerPanel Business Edition 3.4.0 allows an attacker to submit POST requests to any forms in the web application. This can be exploited by tricking an authenticated user into visiting an attacker controlled web page...

PowerPanel Business Edition 3.4.0 Cross Site Request Forgery Vulnerability

PowerPanel Business Edition version 3.4.0 is vulnerable to cross site request forgery vulnerability. This can be exploited by tricking an authenticated user into visiting a web page controlled by a malicious person. Exploit Title: PowerPanel Business Edition 3.4.0 - Cross Site Request Forgery...

CVE-2019-13071

CVE-2019-13071 affects PowerPanel Business Edition 3.4.0 (Agent/Center component). The vulnerability is a CSRF flaw that allows an attacker to submit POST requests to arbitrary forms within the web application by convincing an authenticated user to visit a malicious page. This can enable actions ...

PowerPanel Business Edition 3.4.0 Cross Site Request Forgery

Exploit Title: PowerPanel Business Edition 3.4.0 - Cross Site Request Forgery Date: 7/9/2019 Exploit Author: Joey Lane Vendor Homepage: https://www.cyberpowersystems.com Version: 3.4.0 Tested on: Ubuntu 16.04 CVE : CVE-2019-13071 Reported to vendor on 5/25/2019, no acknowledgement. The Agent/Cent...