CVE-2012-2316

OpenKM < 5.1.8-2 - Cross-Site Request Forgery via Admin Scripting Endpoint

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2012-2316. PoCs published by Cyrill Brunschwiler.

AI-analyzed exploit summary This exploit demonstrates a CSRF-based OS command execution vulnerability in OpenKM Document Management System 5.1.7. It leverages the lack of anti-CSRF tokens to execute arbitrary commands via the admin/scripting.jsp endpoint, requiring an authenticated administrator to visit a malicious URL or HTML page.

Description

Cross-site request forgery (CSRF) vulnerability in servlet/admin/AuthServlet.java in OpenKM 5.1.7 and other versions before 5.1.8-2 allows remote attackers to hijack the authentication of administrators for requests that execute arbitrary code via the script parameter to admin/scripting.jsp.

Exploits (1)

exploitdb WORKING POC VERIFIED

by Cyrill Brunschwiler · textwebappsjsp

https://www.exploit-db.com/exploits/18888

View Code ZIP pw:eip

This exploit demonstrates a CSRF-based OS command execution vulnerability in OpenKM Document Management System 5.1.7. It leverages the lack of anti-CSRF tokens to execute arbitrary commands via the admin/scripting.jsp endpoint, requiring an authenticated administrator to visit a malicious URL or HTML page.

Classification

Working Poc 100%

Attack Type

Rce

Complexity

Trivial

Reliability

Reliable

Target: OpenKM Document Management System 5.1.7

Auth required

Prerequisites: Administrator session in OpenKM · Access to admin/scripting.jsp

MITRE ATT&CK