CVE-2017-6086

HIGH

ViMbAdmin 3.0.15 - Cross-Site Request Forgery in DomainController and MailboxController

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2017-6086. PoCs published by Sysdream.

AI-analyzed exploit summary This exploit demonstrates multiple CSRF vulnerabilities in ViMbAdmin 3.0.15, allowing actions such as adding/removing administrators, changing passwords, and managing mailboxes/aliases without proper anti-CSRF tokens.

Description

Multiple cross-site request forgery (CSRF) vulnerabilities in the addAction and purgeAction functions in ViMbAdmin 3.0.15 allow remote attackers to hijack the authentication of logged administrators to (1) add an administrator user via a crafted POST request to <vimbadmin directory>/application/controllers/DomainController.php, (2) remove an administrator user via a crafted GET request to <vimbadmin directory>/application/controllers/DomainController.php, (3) change an administrator password via a crafted POST request to <vimbadmin directory>/application/controllers/DomainController.php, (4) add a mailbox via a crafted POST request to <vimbadmin directory>/application/controllers/MailboxController.php, (5) delete a mailbox via a crafted POST request to <vimbadmin directory>/application/controllers/MailboxController.php, (6) archive a mailbox address via a crafted GET request to <vimbadmin directory>/application/controllers/ArchiveController.php, (7) add an alias address via a crafted POST request to <vimbadmin directory>/application/controllers/AliasController.php, or (8) remove an alias address via a crafted GET request to <vimbadmin directory>/application/controllers/AliasController.php.

Exploits (1)

exploitdb WORKING POC
by Sysdream · webappsphp
https://www.exploit-db.com/exploits/41967

This exploit demonstrates multiple CSRF vulnerabilities in ViMbAdmin 3.0.15, allowing actions such as adding/removing administrators, changing passwords, and managing mailboxes/aliases without proper anti-CSRF tokens.

Classification
Working Poc 100%
Attack Type
Auth Bypass
Complexity
Trivial
Reliability
Reliable
Target: ViMbAdmin 3.0.15
Auth required
Prerequisites: Victim must be logged in as an administrator · Attacker must trick victim into visiting a malicious page
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (2)

Core 2
Core References
Exploit, Third Party Advisory exploit x_refsource_exploit-db
https://www.exploit-db.com/exploits/41967/
Exploit, Mailing List, Third Party Advisory mailing-list x_refsource_mlist
http://www.openwall.com/lists/oss-security/2017/05/03/7

Scores

CVSS v3 8.8
EPSS 0.0017
EPSS Percentile 38.0%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Details

CWE
CWE-352
Status published
Products (2)
opensolutions/vimbadmin 0Packagist
vimbadmin/vimbadmin 3.0.15
Published Jun 27, 2017
Tracked Since Feb 18, 2026