EDB-44137

PoC

Front Accounting ERP 2.4.3 - Cross-Site Request Forgery

view exploit source exploit_dbtype webappsauthor Samrat Daspublished 2018-02-16catalog exploit_db

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2018-7176US	high8.8	2.35% (84th)	Exploit	2018-02-16
FrontAccounting 2.4.3 suffers from a CSRF flaw, which leads to adding a user account via admin/users.php (aka the "add user" feature of the User Permissions page).

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.