EDB-44826

PoC

GreenCMS 2.3.0603 - Cross-Site Request Forgery (Add Admin)

view exploit source exploit_dbtype webappsauthor xichaopublished 2018-06-03catalog exploit_db

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2018-11671US	high8.8	2.39% (84th)	Exploit	2018-06-01
An issue was discovered in GreenCMS v2.3.0603. There is a CSRF vulnerability that can add an admin account via index.php?m=admin&c=access&a=adduserhandle.

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.