CVE-2014-8429
xEpan CMS <= 1.0.4.1 - Cross-Site Request Forgery via Administrative Account Creation
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2014-8429. PoCs published by High-Tech Bridge SA.
AI-analyzed exploit summary This is a working CSRF exploit for CVE-2014-8429 in xEpan CMS, which allows an attacker to create an administrative account by tricking an authenticated admin into visiting a malicious page. The exploit uses a hidden form with predefined values to submit a POST request, creating a user with admin privileges.
Description
Cross-site request forgery (CSRF) vulnerability in Xavoc Technocrats xEpan CMS 1.0.4.1, 1.0.4, 1.0.1, and earlier allows remote attackers to hijack the authentication of administrators for requests that create new administrative accounts via a crafted request to the owner/users page.
Exploits (1)
This is a working CSRF exploit for CVE-2014-8429 in xEpan CMS, which allows an attacker to create an administrative account by tricking an authenticated admin into visiting a malicious page. The exploit uses a hidden form with predefined values to submit a POST request, creating a user with admin privileges.