CVE-2025-52392
MEDIUMSoosyze CMS 2.0 - Brute-Force Login via Unrestricted Authentication Attempts
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2025-52392. PoCs published by Beatriz Fresno Naumova, ftz7.
AI-analyzed exploit summary This script demonstrates a brute-force attack against Soosyze CMS 2.0 by exploiting missing rate limiting on the login endpoint. It automates POST requests with a wordlist or default passwords to bypass authentication.
Description
Soosyze CMS 2.0 allows brute-force login attacks via the /user/login endpoint due to missing rate-limiting and lockout mechanisms. An attacker can repeatedly submit login attempts without restrictions, potentially gaining unauthorized administrative access. This vulnerability corresponds to CWE-307: Improper Restriction of Excessive Authentication Attempts.
Exploits (2)
This script demonstrates a brute-force attack against Soosyze CMS 2.0 by exploiting missing rate limiting on the login endpoint. It automates POST requests with a wordlist or default passwords to bypass authentication.
This repository contains a functional Bash script that demonstrates a brute-force attack against a login form in Soosyze CMS 2.0, exploiting the lack of rate limiting or other protections. The script automates the process of capturing CSRF tokens, submitting login attempts, and detecting successful authentication via response analysis.
References (3)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N