CVE-2025-2304-Camaleon-CMS-Mass-Assignment-Privilege-Escalation-PoC

CVE-2025-2304 — Camaleon CMS Escalação de Privilégios por Mass Assignment PoC Vulnerabilidade de escalação de privilégios no Camaleon CMS /updatedajax com passwordrole=admin injetado nos parâmetros de senha. 4. Verifica se a função foi atualizada para admin. Requisitos Python 3 Instale as...

CVE-2025-2304

CVE-2025-2304 - Camaleon CMS 2.9.0 - Exploit di Escalation dei Privilegi Panoramica Questo script Python sfrutta una vulnerabilità critica di mass assignment in Camaleon CMS versione 2.9.0, consentendo a qualsiasi utente registrato di elevare i propri privilegi ad amministratore. Dettagli della...

CVE-2025-2304-POC

CVE-2025-2304 Escalation dei privilegi in Camaleon CMS Esempio root@kitploit: python3 exploit.py http://target.com attacker attacker Dopo lo sfruttamento riuscito, esci e accedi di nuovo per ottenere i privilegi di amministratore. Riferimenti https://nvd.nist.gov/vuln/detail/CVE-2025-2304...

Exploit for CVE-2025-2304

Camaleon CMS 2.9.0 – Authenticated Privilege Escalation Role...

Exploit for CVE-2025-2304

PoC: CVE-2025-2304 - Camaleon CMS Privilege Escalation Tec...

Improperly Controlled Modification of Dynamically-Determined Object Attributes

Overview camaleoncms is a dynamic and advanced content management system based on Ruby on Rails as an alternative to Wordpress. Affected versions of this package are vulnerable to Improperly Controlled Modification of Dynamically-Determined Object Attributes via the updatedajax method of the...

CVE-2025-2304

A Privilege Escalation through a Mass Assignment exists in Camaleon CMS When a user wishes to change his password, the 'updatedajax' method of the UsersController is called. The vulnerability stems from the use of the dangerous permit! method, which allows all parameters to pass through without a...