CVE-2015-1424
Gecko CMS 2.2-2.3 - Cross-Site Request Forgery via Admin User Creation
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2015-1424. PoCs published by LiquidWorm.
AI-analyzed exploit summary The exploit demonstrates multiple vulnerabilities in Gecko CMS 2.3, including CSRF for admin creation, stored and reflected XSS, and SQL injection. It provides specific payloads and parameters for exploitation.
Description
Cross-site request forgery (CSRF) vulnerability in Gecko CMS 2.2 and 2.3 allows remote attackers to hijack the authentication of administrators for requests that add an administrator user via a newuser request to admin/index.php.
Exploits (1)
The exploit demonstrates multiple vulnerabilities in Gecko CMS 2.3, including CSRF for admin creation, stored and reflected XSS, and SQL injection. It provides specific payloads and parameters for exploitation.