EIP-2026-107686
PRE-CVEHycus CMS 1.0.1 - Multiple Cross-Site Request Forgery Vulnerabilities
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-107686. PoCs published by 10n1z3d.
AI-analyzed exploit summary This exploit demonstrates multiple CSRF vulnerabilities in Hycus CMS 1.0.1, allowing unauthorized actions such as changing admin passwords, creating admin users, deleting users, and deleting files. The PoC uses HTML forms and image tags to trigger malicious requests without user interaction.
Description
Hycus CMS 1.0.1 - Multiple Cross-Site Request Forgery Vulnerabilities
Exploits (1)
This exploit demonstrates multiple CSRF vulnerabilities in Hycus CMS 1.0.1, allowing unauthorized actions such as changing admin passwords, creating admin users, deleting users, and deleting files. The PoC uses HTML forms and image tags to trigger malicious requests without user interaction.