Snews CMS Cross-Site Request Forgery Vulnerability Allowing Unauthorized Credential Changes

A cross-site request forgery (CSRF) vulnerability has been identified in Snews CMS version 1.7. This vulnerability allows attackers to change administrator credentials without authentication. By crafting malicious HTML forms, attackers can trick authenticated administrators into submitting POST requests that modify the admin username and password. This exploitation can lead to unauthorized access.

Impact

Exploitation of this vulnerability allows for unauthorized changes to administrator credentials, potentially leading to unauthorized administrative access.

Reproduction

To reproduce this vulnerability, create a hidden HTML form that submits POST requests to the 'changeup' action. Include the new username and password values in the form. When an authenticated administrator visits the page with the hidden form, the credentials will be changed without their knowledge.