# Author: Fady Mohammed Osman (cute hacker) # Software Link: http://www.saurus.info/download/SaurusCMS-4.7.0.tgz # Version: 4.7.0 # Tested on: Ubuntu 10.04 # CVE : [Not available] # This vulnerability allows a malicious hacker to change password of a user and also it allows changing the website information. PoC 1: Saurus CSRF : Change site information PoC 2: Saurus CSRF : Change user's password