EyouCMS V1.5.9-UTF8-SP1 was discovered to contain a Cross-Site Request Forgery (CSRF) via the Edit Admin Profile module. This vulnerability allows attackers to arbitrarily change Administrator account information.
cpe:2.3:a:eyoucms:eyoucms:1.5.9:*:*:*:*:*:*:*
42A15197-E862-429C-8ECB-79D0B850C9C5
OR
EyouCMS v1.5.9 has a vulnerability, Cross-site request forgery(CSRF).Located in the background, edit the administrator profile. This vulnerability may cause the modification of personal information such as administrator password, mobile phone number, and email address. To exploit this vulnerability, a constructed HTML file needs to be opened.
1、Go to the back office - > personal information
![图片1](https://user-images.githubusercontent.com/83074322/198805600-647f7444-43de-4f24-bc6f-d5bbb9b2b3df.png)
![图片2](https://user-images.githubusercontent.com/83074322/198805663-e2201462-1adb-41f1-9af4-33972ad314f0.png)
The password is “admin123456”
2、Construct a request package to change passwords, mobile phone numbers, email addresses, and other basic information.
![图片3](https://user-images.githubusercontent.com/83074322/198806546-09371725-758a-44a7-afa9-17a6b092a35b.png)
The above figure shows the constructed web page code, using CSRF to change its password to "csrftest", the mobile phone number to "11111111111", and the email address to "123@csrf.test".
3、View the administrator's profile:
![图片4](https://user-images.githubusercontent.com/83074322/198807952-63991501-10fc-4b47-a14c-e24f9e95ada8.png)
At this time, the administrator password is "admin123456", and other information is shown in the preceding figure.
4、Click on the constructed web page.
![图片5](https://user-images.githubusercontent.com/83074322/198812728-5c5a42e8-4c83-4632-9b69-8534d8acb298.png)
Return to the backend page to view the administrator's profile.
![图片6](https://user-images.githubusercontent.com/83074322/198812752-d48e6cbe-c768-460c-a7eb-faebbb5da159.png)
Successfully used CSRF to modify mobile phone number and email address.
Verify that the password is changed to "csrftest":
![图片7](https://user-images.githubusercontent.com/83074322/198812781-b7d005c9-1fdd-4a1e-aac0-e9ef3dec2045.png)
![图片8](https://user-images.githubusercontent.com/83074322/198812786-834bf889-e7e4-47b8-8633-84a6314ef1ae.png)
Login successful!
EyouCMS v1.5.9 has a vulnerability, Cross-site request forgery(CSRF)
This is a GitHub Issue
repo:eyoucms
owner:weng-xianhu
Title : EyouCMS v1.5.9 has a vulnerability, Cross-site request forgery(CSRF)
Issue date:

--- start body ---
EyouCMS v1.5.9 has a vulnerability, Cross-site request forgery(CSRF).Located in the background, edit the administrator profile. This vulnerability may cause the modification of personal information such as administrator password, mobile phone number, and email address. To exploit this vulnerability, a constructed HTML file needs to be opened.
1、Go to the back office - > personal information
![图片1](https://user-images.githubusercontent.com/83074322/198805600-647f7444-43de-4f24-bc6f-d5bbb9b2b3df.png)
![图片2](https://user-images.githubusercontent.com/83074322/198805663-e2201462-1adb-41f1-9af4-33972ad314f0.png)
The password is “admin123456”
2、Construct a request package to change passwords, mobile phone numbers, email addresses, and other basic information.
![图片3](https://user-images.githubusercontent.com/83074322/198806546-09371725-758a-44a7-afa9-17a6b092a35b.png)
The above figure shows the constructed web page code, using CSRF to change its password to "csrftest", the mobile phone number to "11111111111", and the email address to "123@csrf.test".
3、View the administrator's profile:
![图片4](https://user-images.githubusercontent.com/83074322/198807952-63991501-10fc-4b47-a14c-e24f9e95ada8.png)
At this time, the administrator password is "admin123456", and other information is shown in the preceding figure.
4、Click on the constructed web page.
![图片5](https://user-images.githubusercontent.com/83074322/198812728-5c5a42e8-4c83-4632-9b69-8534d8acb298.png)
Return to the backend page to view the administrator's profile.
![图片6](https://user-images.githubusercontent.com/83074322/198812752-d48e6cbe-c768-460c-a7eb-faebbb5da159.png)
Successfully used CSRF to modify mobile phone number and email address.
Verify that the password is changed to "csrftest":
![图片7](https://user-images.githubusercontent.com/83074322/198812781-b7d005c9-1fdd-4a1e-aac0-e9ef3dec2045.png)
![图片8](https://user-images.githubusercontent.com/83074322/198812786-834bf889-e7e4-47b8-8633-84a6314ef1ae.png)
Login successful!
--- end body ---

comments :
--- start comments ---

--- end comments ---