CVE-2015-5530

Free Reprintables ArticleFR 3.0.6 - CSRF

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2015-5530. PoCs published by LiquidWorm.

AI-analyzed exploit summary The exploit demonstrates a CSRF vulnerability in ArticleFR 3.0.6 that allows an attacker to create an admin account via a malicious form submission. It also includes multiple stored XSS vulnerabilities in different modules.

Description

Multiple cross-site request forgery (CSRF) vulnerabilities in Free Reprintables ArticleFR 3.0.6 allow remote attackers to hijack the authentication of administrators for requests that add an administrator account via a request to dashboard/users/create/.

Exploits (1)

exploitdb WORKING POC
by LiquidWorm · textwebappsphp
https://www.exploit-db.com/exploits/37596

The exploit demonstrates a CSRF vulnerability in ArticleFR 3.0.6 that allows an attacker to create an admin account via a malicious form submission. It also includes multiple stored XSS vulnerabilities in different modules.

Classification
Working Poc 100%
Attack Type
Xss
Complexity
Trivial
Reliability
Reliable
Target: ArticleFR 3.0.6
No auth needed
Prerequisites: Victim must visit a malicious webpage while logged into the target application
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (2)

Core 2
Core References
Exploit exploit x_refsource_exploit-db
https://www.exploit-db.com/exploits/37596/

Scores

EPSS 0.0122
EPSS Percentile 64.7%

Details

CWE
CWE-352
Status published
Products (1)
freereprintables/articlefr 3.0.6
Published Jul 16, 2015
Tracked Since Feb 18, 2026