Exploitation Summary
EIP tracks 1 public exploit for CVE-2012-2315.
AI-analyzed exploit summary This exploit demonstrates a CSRF-based OS command execution vulnerability in OpenKM Document Management System 5.1.7. It leverages the lack of anti-CSRF tokens in the administrative interface to execute arbitrary commands via the scripting.jsp endpoint.
Description
admin/Auth in OpenKM 5.1.7 and other versions before 5.1.8-2 does not properly enforce privileges for changing user roles, which allows remote authenticated users to assign administrator privileges to arbitrary users via the userEdit action.
Exploits (1)
This exploit demonstrates a CSRF-based OS command execution vulnerability in OpenKM Document Management System 5.1.7. It leverages the lack of anti-CSRF tokens in the administrative interface to execute arbitrary commands via the scripting.jsp endpoint.