CVE-2015-6545
Cerb < 7.0.3 - Cross-Site Request Forgery via ajax.php saveWorkerPeek Action
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2015-6545. PoCs published by High-Tech Bridge SA.
AI-analyzed exploit summary This is a working proof-of-concept for a CSRF vulnerability in Cerb 7.0.3, which allows an attacker to add an administrative user by tricking an authenticated admin into submitting a malicious form.
Description
Cross-site request forgery (CSRF) vulnerability in ajax.php in Cerb before 7.0.4 allows remote attackers to hijack the authentication of administrators for requests that add an administrator account via a saveWorkerPeek action.
Exploits (1)
This is a working proof-of-concept for a CSRF vulnerability in Cerb 7.0.3, which allows an attacker to add an administrative user by tricking an authenticated admin into submitting a malicious form.