Exploitation Summary
EIP tracks 1 public exploit for CVE-2020-37007. PoCs published by George Tsimpidas.
AI-analyzed exploit summary This exploit demonstrates a CSRF vulnerability in Liman 0.7, allowing an attacker to change a victim's account information or password via crafted HTML forms. The PoC includes two HTML files targeting profile and password endpoints without CSRF protection.
Description
Liman 0.7 contains a cross-site request forgery vulnerability that allows attackers to manipulate user account settings without proper request validation. Attackers can craft malicious HTML forms to change user passwords or modify account information by tricking logged-in users into submitting unauthorized requests.
Exploits (1)
This exploit demonstrates a CSRF vulnerability in Liman 0.7, allowing an attacker to change a victim's account information or password via crafted HTML forms. The PoC includes two HTML files targeting profile and password endpoints without CSRF protection.
References (3)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N