CVE-2014-9344
Snowfox CMS < 1.0 - Cross-Site Request Forgery via Admin Account Creation
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2014-9344. PoCs published by LiquidWorm.
AI-analyzed exploit summary This is a CSRF exploit for Snowfox CMS v1.0 that allows an attacker to add an admin user by tricking an authenticated admin into submitting a malicious form. The exploit sends a POST request to the admin account creation endpoint with predefined values.
Description
Cross-site request forgery (CSRF) vulnerability in Snowfox CMS before 1.0.10 allows remote attackers to hijack the authentication of administrators for requests that add a new admin account via a submit action in the admin/accounts/create uri to snowfox/.
Exploits (1)
This is a CSRF exploit for Snowfox CMS v1.0 that allows an attacker to add an admin user by tricking an authenticated admin into submitting a malicious form. The exploit sends a POST request to the admin account creation endpoint with predefined values.