Exploitation Summary
EIP tracks 2 public exploits for CVE-2012-1304. PoCs published by Ivano Binetti, Avram Marius.
AI-analyzed exploit summary The exploit demonstrates CSRF and XSS vulnerabilities in ForkCMS 3.2.5, including PoC HTML/JavaScript code for deleting users/pages and privilege escalation via session token reuse.
Description
Fork CMS 3.2.4 - Local File Inclusion / Cross-Site Scripting
Exploits (2)
The exploit demonstrates CSRF and XSS vulnerabilities in ForkCMS 3.2.5, including PoC HTML/JavaScript code for deleting users/pages and privilege escalation via session token reuse.
The exploit demonstrates reflected XSS and LFI vulnerabilities in Fork CMS v3.2.4. It includes functional PoC URLs for both issues, showing how arbitrary JavaScript can be executed and local files can be included via path traversal.