Qool CMS v2.0 multiple defects

Success <! -- Qool CMS v2.0 RC2 XSRF Add Root Exploit developer: Qool CMS official website: http://www.qool.gr Affected Product: 2.0 RC2 (Codename: Sommige) Summary: Qool CMS is a content management system that helps webmasters be more productive. qool has been built with both worlds (web master, web developer) in mind. it is easy to create addons (extensions) for the system but you can really do without them too. overview: Qool CMS allows users to perform certain actions via HTTPrequests without authentication Ming any validity checks Verify the requests. this can be exploited to perform certain actions with administrativeprivileges if a logged-in user visits a malicious web site. -Level 1-Root-Level 2-Admin-Level 500-Editor-Level 6000-Member-Level 8000-Visitor test system information: Microsoft Windows 7 Ultimate SP1 (EN) apache 2.4.2 (Win32) PHP 5.4.4 MySQL 5.5.25a Vulnerability discovered by Gjoko 'liquidworm' Krstic @ zero Science -->