OpenSolution QuickCMS Cross-Site Request Forgery Vulnerability

A Cross-Site Request Forgery (CSRF) vulnerability has been identified in OpenSolution QuickCMS version 6.8. This vulnerability allows an attacker to create a malicious website that, when visited by a user with administrative privileges, automatically sends a POST request using the victim's credentials. QuickCMS lacks any protection against CSRF attacks, leaving all forms within the application potentially vulnerable.

Impact

Exploitation of this vulnerability allows for Cross-Site Request Forgery, where an attacker can perform actions on behalf of a user without their consent, potentially leading to unauthorized changes or data manipulation within the application.