CVE-2013-5316
RiteCMS 1.0.0 - Cross-Site Request Forgery via Administrator Password Change
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2013-5316. PoCs published by Yashar shahinzadeh.
AI-analyzed exploit summary The exploit demonstrates two vulnerabilities in RiteCMS 1.0.0: a CSRF attack to change the administrator's password and a reflected XSS vulnerability. The CSRF PoC includes a crafted HTML form that submits malicious requests to the target application, while the XSS is triggered via a malicious URL parameter.
Description
Cross-site request forgery (CSRF) vulnerability in RiteCMS 1.0.0 allows remote attackers to hijack the authentication of administrators for requests that change the administrator password via an edit user action to cms/index.php.
Exploits (1)
The exploit demonstrates two vulnerabilities in RiteCMS 1.0.0: a CSRF attack to change the administrator's password and a reflected XSS vulnerability. The CSRF PoC includes a crafted HTML form that submits malicious requests to the target application, while the XSS is triggered via a malicious URL parameter.