Description
Exagate SYSGuard 6001 contains a cross-site request forgery vulnerability that allows attackers to create unauthorized admin accounts through a crafted HTML form. Attackers can trick users into submitting a malicious form to /kulyon.php that adds a new user with administrative privileges without the victim's consent.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Exagate | Sysguard 6001 | 6001 | — |
References
- ExploitDB-48234 exploit
- Exagate Vendor Homepage product
- Archived Sysguard 6001 Product Page product
- VulnCheck Advisory: Exagate Sysguard 6001 - Cross-Site Request Forgery (Add Admin) third-party-advisory