CVE-2012-1208

This is a detailed writeup describing multiple vulnerabilities in ForkCMS 3.2.5, including CSRF and XSS. It provides proof-of-concept HTML/JS code for exploiting these vulnerabilities but does not contain executable exploit code.

This exploit demonstrates reflected XSS and LFI vulnerabilities in Fork CMS v3.2.4. The XSS payloads are injected via URL parameters, while the LFI allows reading arbitrary files via path traversal.