Exploitation Summary
EIP tracks 1 public exploit for CVE-2015-5529. PoCs published by LiquidWorm.
AI-analyzed exploit summary The exploit demonstrates a CSRF vulnerability in ArticleFR 3.0.6 that allows an attacker to create an admin account via a malicious form submission. It also includes multiple stored XSS vulnerabilities in different modules.
Description
Multiple cross-site scripting (XSS) vulnerabilities in Free Reprintables ArticleFR 3.0.6 allow remote attackers to inject arbitrary web script or HTML via the (1) name parameter to dashboard/settings/categories/, (2) title or (3) rel parameter to dashboard/settings/links/, or (4) url parameter to dashboard/tools/pingservers/.
Exploits (1)
The exploit demonstrates a CSRF vulnerability in ArticleFR 3.0.6 that allows an attacker to create an admin account via a malicious form submission. It also includes multiple stored XSS vulnerabilities in different modules.