CVE-2010-3884
CMS Made Simple < 1.8.1 - Cross-Site Request Forgery to Reset Admin Password
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2010-3884. PoCs published by pratul agrawal.
AI-analyzed exploit summary This exploit demonstrates a CSRF vulnerability in CMS Made Simple 1.7, allowing an attacker to add an admin user via a crafted HTML form. The PoC automatically submits the form upon page load, bypassing user interaction.
Description
Cross-site request forgery (CSRF) vulnerability in CMS Made Simple 1.8.1 and earlier allows remote attackers to hijack the authentication of administrators for requests that reset the administrative password. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Exploits (1)
This exploit demonstrates a CSRF vulnerability in CMS Made Simple 1.7, allowing an attacker to add an admin user via a crafted HTML form. The PoC automatically submits the form upon page load, bypassing user interaction.