CVE-2019-6249

This exploit demonstrates a CSRF vulnerability in HuCart CMS v5.7.4, allowing an attacker to add an administrator account by tricking an authenticated admin into visiting a malicious page. The PoC uses JavaScript to automatically submit a form with crafted parameters to the vulnerable endpoint.

This repository contains a proof-of-concept for CVE-2019-6249, a CSRF vulnerability in Hucart CMS v5.7.4 that allows an attacker to add an arbitrary admin account via a crafted HTML page.