This is a functional CSRF exploit for ProQuiz v2.0.2 that changes the admin password via a crafted HTML form. The exploit leverages a lack of CSRF token validation in the password change functionality.
Classification
Working Poc 95%
Attack Type
Auth Bypass
Complexity
Trivial
Reliability
Reliable
Target:ProQuiz v2.0.2
No auth needed
Prerequisites:Victim must visit the malicious HTML page while authenticated as admin