Exploitation Summary
EIP tracks 1 public exploit for CVE-2020-36918. PoCs published by LiquidWorm.
AI-analyzed exploit summary This exploit demonstrates a Cross-Site Request Forgery (CSRF) vulnerability in iDS6 DSSPro Digital Signage System 6.2, allowing an attacker to add a new user with administrative privileges if a logged-in user visits a malicious webpage.
Description
iDS6 DSSPro Digital Signage System 6.2 contains a cross-site request forgery vulnerability that allows attackers to perform administrative actions without request validation. Attackers can craft malicious web pages to trick logged-in administrators into adding unauthorized users by exploiting the lack of CSRF protections.
Exploits (1)
This exploit demonstrates a Cross-Site Request Forgery (CSRF) vulnerability in iDS6 DSSPro Digital Signage System 6.2, allowing an attacker to add a new user with administrative privileges if a logged-in user visits a malicious webpage.
References (7)
Scores
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N