EIP-2026-107259
PRE-CVEFrog CMS 0.9.5 - Multiple Cross-Site Request Forgery Vulnerabilities
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-107259. PoCs published by 10n1z3d.
AI-analyzed exploit summary The exploit demonstrates multiple CSRF vulnerabilities in Frog CMS 0.9.5, allowing actions such as creating an admin user, deleting users/pages/snippets/layouts/files, and logging out the administrator. The PoC uses HTML forms and image tags to trigger unauthorized actions when loaded by an authenticated user.
Description
Frog CMS 0.9.5 - Multiple Cross-Site Request Forgery Vulnerabilities
Exploits (1)
The exploit demonstrates multiple CSRF vulnerabilities in Frog CMS 0.9.5, allowing actions such as creating an admin user, deleting users/pages/snippets/layouts/files, and logging out the administrator. The PoC uses HTML forms and image tags to trigger unauthorized actions when loaded by an authenticated user.