cve/2017/CVE-2017-7446.md

CVE-2017-7446

Description

HelpDEZk 1.1.1 has CSRF in admin/home#/person/ with an impact of obtaining admin privileges.

POC

Reference

• http://rungga.blogspot.co.id/2017/04/multiple-csrf-remote-code-execution.html
• https://github.com/albandes/helpdezk/issues/2
• https://www.exploit-db.com/exploits/41824/

Github

No PoCs found on GitHub currently.