CVE-2020-23342

This exploit demonstrates a CSRF vulnerability in Anchor CMS 0.12.7, allowing an attacker to delete a user by tricking an admin into clicking a malicious link. The exploit uses a simple GET request to delete a user with a specified ID.

This repository contains a proof-of-concept exploit for CVE-2020-23342, targeting Anchor CMS. The exploit leverages a command injection vulnerability in the `composer_check.php` file, where the `exec` function is used unsafely to run `composer install`.