UliCMS 8.0.1 Cross Site Request Forgery

Affected software: UliCMS 8.0.1 Type of vulnerability: admin add exploit csrf URL: http://en.ulicms.de/ Discovered by: Provensec Website: http://www.provensec.com version 8.0.1 Proof of concept...

CVE-2015-2259: UliCMS index.php cross-site request forgery

CVE-2015-2259 affects UliCMS via the index.php script, where improper validation enables a CSRF condition. An authenticated user visiting a crafted site could be forced to perform actions that add an administrator account, with potential for cross-site scripting and Web cache poisoning. The descr...