EIP-2026-110340

PRE-CVE

Orbis CMS 1.0.2 - Multiple Cross-Site Request Forgery Vulnerabilities

Title source: legacy
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-110340. PoCs published by 10n1z3d.

AI-analyzed exploit summary This is a proof-of-concept for multiple CSRF vulnerabilities in Orbis CMS 1.0.2, including changing admin passwords, creating admin users, deleting users, and logging out administrators. The PoC uses HTML forms and image tags to trigger unauthorized actions via GET requests.

Description

Orbis CMS 1.0.2 - Multiple Cross-Site Request Forgery Vulnerabilities

Exploits (1)

exploitdb WORKING POC VERIFIED
by 10n1z3d · htmlwebappsphp
https://www.exploit-db.com/exploits/14333

This is a proof-of-concept for multiple CSRF vulnerabilities in Orbis CMS 1.0.2, including changing admin passwords, creating admin users, deleting users, and logging out administrators. The PoC uses HTML forms and image tags to trigger unauthorized actions via GET requests.

Classification
Working Poc 100%
Attack Type
Other
Complexity
Trivial
Reliability
Reliable
Target: Orbis CMS 1.0.2
No auth needed
Prerequisites: Victim must be authenticated as an administrator and visit the malicious page
devstral-2 · analyzed Feb 16, 2026 Full analysis →

Details

Status pre_cve
Tracked Since Feb 18, 2026