EIP-2026-105835

PRE-CVE

Chipmunk NewsLetter - Cross-Site Request Forgery

Title source: legacy
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-105835. PoCs published by Milos Zivanovic.

AI-analyzed exploit summary The exploit demonstrates multiple CSRF vulnerabilities in Chipmunk Newsletter's admin panel, allowing unauthorized actions such as deleting email lists, clearing queues, sending mass emails, and deleting emails by ID via crafted HTML forms.

Description

Chipmunk NewsLetter - Cross-Site Request Forgery

Exploits (1)

exploitdb WORKING POC VERIFIED
by Milos Zivanovic · textwebappsphp
https://www.exploit-db.com/exploits/10388

The exploit demonstrates multiple CSRF vulnerabilities in Chipmunk Newsletter's admin panel, allowing unauthorized actions such as deleting email lists, clearing queues, sending mass emails, and deleting emails by ID via crafted HTML forms.

Classification
Working Poc 95%
Attack Type
Other
Complexity
Trivial
Reliability
Reliable
Target: Chipmunk Newsletter (version not specified)
Auth required
Prerequisites: Admin session active on the target site · Victim interaction to trigger the CSRF
devstral-2 · analyzed Feb 18, 2026 Full analysis →

Details

Status pre_cve
Tracked Since Feb 18, 2026