Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
Tools/GitHubGitHub/as4mir/cve-2021-45007
Vulnerability AnalysisExploitationWeb Application ExploitationWeb Security
GitHubas4mir/cve-2021-45007

CVE-2021-45007

Proof-of-concept for CVE-2021-45007, a CSRF vulnerability in Plesk Obsidian 18.0.37, demonstrating request submission without CSRF token protection.

View Repository
214 years agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2021-45007

#Cross-Site Request Forgery

Affected product and version: Plesk Obsidian 18.0.37

Severity: High

Impact: Submit requests with attacker information

Description: CSRF could let the attacker to submit new requests because there isn’t any CSRF_token protection sent with requests to server.

Steps to reproduce:

  1. Login and try to submit any request
  2. Capture the request with burp suite

image

  1. Will note that there isn’t any token protection sent with request to server
  2. Write simple html exploit to submit request

image

  1. Open it in browser

image

  1. Submit the request

image

  1. Will find that your data are submitted successfully

image

Download Tool