CVE-2016-4315

MEDIUM

WSO2 Carbon 4.4.5 - Cross-Site Request Forgery via Server Shutdown Action

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2016-4315. PoCs published by hyp3rlinx.

AI-analyzed exploit summary This exploit demonstrates a CSRF vulnerability in WSO2 Carbon v4.4.5, allowing an attacker to trick a privileged user into shutting down the server via a malicious link. The exploit leverages the lack of CSRF protection in the `proxy_ajaxprocessor.jsp` endpoint.

Description

Cross-site request forgery (CSRF) vulnerability in WSO2 Carbon 4.4.5 allows remote attackers to hijack the authentication of privileged users for requests that shutdown a server via a shutdown action to server-admin/proxy_ajaxprocessor.jsp.

Exploits (1)

exploitdb WORKING POC VERIFIED

by hyp3rlinx · textwebappsjsp

https://www.exploit-db.com/exploits/40242

View Code ZIP pw:eip

This exploit demonstrates a CSRF vulnerability in WSO2 Carbon v4.4.5, allowing an attacker to trick a privileged user into shutting down the server via a malicious link. The exploit leverages the lack of CSRF protection in the `proxy_ajaxprocessor.jsp` endpoint.

Classification

Working Poc 100%

Attack Type

Dos

Complexity

Trivial

Reliability

Reliable

Target: WSO2 Carbon v4.4.5

Auth required

Prerequisites: Privileged user session · Victim interaction (clicking a malicious link)

MITRE ATT&CK