CVE-2013-20005 Qool CMS 2.0 RC2 Cross-Site Request Forgery via adduser
Attackers can create root-level user accounts in Qool CMS by tricking logged-in administrators into visiting malicious pages.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2013-20005?
CVE-2013-20005 is a medium-severity vulnerability in Qool CMS, published on 15 Mar 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Qool CMS 2.0 RC2 contains a cross-site request forgery vulnerability that allows attackers to perform administrative actions by tricking logged-in users into visiting malicious web pages. Attackers can forge POST requests to the /admin/adduser endpoint with parameters like username, password, email, and level to create root-level user accounts without user consent.
Weakness: CWE-79
Which versions are affected by CVE-2013-20005?
How do I fix CVE-2013-20005?
No fix has been published for CVE-2013-20005 yet. Limit exposure of the affected software until one is available.
Is CVE-2013-20005 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2013-20005 exists.
Sources
Also known as GHSA-gx9f-52wg-g9gm.