CVE-2010-3030

Tomaz Muraus Open Blog 1.2.1 - CSRF

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2010-3030. PoCs published by High-Tech Bridge SA.

AI-analyzed exploit summary This is a functional CSRF exploit for Open Blog 1.2.1, demonstrating how an attacker can forge a request to elevate a user's privileges to administrator via a crafted HTML form with auto-submission.

Description

Cross-site request forgery (CSRF) vulnerability in Tomaz Muraus Open Blog 1.2.1, and possibly earlier, allows remote attackers to hijack the authentication of administrators for requests that change the administrative password. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Exploits (1)

exploitdb WORKING POC
by High-Tech Bridge SA · htmlwebappsphp
https://www.exploit-db.com/exploits/14562

This is a functional CSRF exploit for Open Blog 1.2.1, demonstrating how an attacker can forge a request to elevate a user's privileges to administrator via a crafted HTML form with auto-submission.

Classification
Working Poc 95%
Attack Type
Auth Bypass
Complexity
Trivial
Reliability
Reliable
Target: Open Blog 1.2.1 and prior versions
No auth needed
Prerequisites: Victim must visit a malicious page while authenticated to the target application
devstral-2 · analyzed Feb 18, 2026 Full analysis →

References (1)

Core 1
Core References
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/40876

Scores

EPSS 0.0083
EPSS Percentile 52.6%

Details

CWE
CWE-352
Status published
Products (1)
tomaz-muraus/open_blog 1.2.1
Published Aug 17, 2010
Tracked Since Feb 18, 2026